Web lists-archives.com

[Samba] samba-tool domain backup ERROR





Hello,

we want to backup the AD-database with the samba-tool backup-option. We use Sernet-packages 4.9.4 we have two DCs if I do the backup on the same DC I got the following messages:
-----------------
root@dc-ste-01:~# samba-tool domain backup online --server=dc-ste-01 --targetdir=. -U administrator
Password for [LF\administrator]:
....
Committing SAM database
Setting isSynchronized and dsServiceName
Cloned domain LF (SID S-1-5-21-2842440679-1648109622-3732055899)
ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index out of range File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run
    return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", line 237, in run
    new_sid = get_sid_for_restore(remote_sam)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", line 73, in get_sid_for_restore
    rid = int(res[0].get('rIDNextRID')[0])

-----------------

If we do it on the other DC we got the following messages:
-----------------
root@dc-ste-01:~# samba-tool domain backup online --server=dc-ibb-01 --targetdir=. -U administrator
Password for [LF\administrator]:
Committing SAM database
Setting isSynchronized and dsServiceName
Cloned domain LF (SID S-1-5-21-2842440679-1648109622-3732055899)
ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.') File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run
    return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", line 243, in run
    backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid())
File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 508, in backup_online
    ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True)
File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 331, in get_acl
    smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS)

-----------------
the package "lmdb-utils" is installed on both DCs.

Any tip?

Stefan

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba