[Samba] Problems adding a Samba4 AD to existing Win2000 AD
James B. Byrne
byrnejb at harte-lyne.ca
Tue Feb 4 07:41:20 MST 2014
i86_64
CentOS-6.5
Samba-4.1.4-7 (sernet)
MS-Win2000 Advanced Server AD DC
I am following the HowTo provided at
https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC. I am at
this point:
--->
In this case, 737506d0-bfe6-40c8-815d-08c3dff7a67f is the objectGUID of
the new DC, we'll query with the following command:
# host -t CNAME 737506d0-bfe6-40c8-815d-08c3dff7a67f._msdcs.samdom.example.com.
This should output you the alias (CNAME) of this entry pointing to your
new DC name.
If this record is also missing, you have to add it, too:
# samba-tool dns add IP-of-your-DNS _msdcs.samdom.example.com
737506d0-bfe6-40c8-815d-08c3dff7a67f CNAME DC2.samdom.example.com
-Uadministrator
<---
When I attempt to add the GUID of the new Samba AD DC to the DNS server
running on the existing Win2000 AD DC I get this:
# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator at BROCKLEY.HARTE-LYNE.CA
Valid starting Expires Service principal
02/03/14 11:40:04 02/03/14 21:43:05
krbtgt/BROCKLEY.HARTE-LYNE.CA at BROCKLEY.HARTE-LYNE.CA
renew until 02/10/14 11:40:04
#find / -name sam.ldb
/var/lib/samba/private/sam.ldb
# ldbsearch -H /var/lib/samba/private/sam.ldb '(invocationid=*)' --cross-ncs
objectguid
# record 1
dn: CN=NTDS
Settings,CN=BRDC-01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=brockley,DC=harte-lyne,DC=ca
objectGUID: db6fdf6c-2d53-4946-b6cd-1ad88227716d
# record 2
dn: CN=NTDS
Settings,CN=BRDC-02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=brockley,DC=harte-lyne,DC=ca
objectGUID: 4c012287-f5d1-4f54-b186-3c6d5bfc2c68
# samba-tool dns add 192.168.216.66 _msdcs.brockley.harte-lyne.ca
4c012287-f5d1-4f54-b186-3c6d5bfc2c68 CNAME brdc-02.brockley.harte-lyne.ca
-Uadministrator
Password for [BROCKLEY\administrator]:
ERROR(runtime): uncaught exception - (-1073610706,
'NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE')
File "/usr/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line
175, in _run
return self.run(*args, **kwargs)
File "/usr/lib64/python2.6/site-packages/samba/netcmd/dns.py", line 1067, in
run
0, server, zone, name, add_rec_buf, None)
The contents of /etc/samba/smb.conf (auto-created) are:
# cat /etc/samba/smb.conf
# Global parameters
[global]
workgroup = BROCKLEY
realm = brockley.harte-lyne.ca
netbios name = BRDC-02
server role = active directory domain controller
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind,
ntp_signd, kcc, dnsupdate
[netlogon]
path = /var/lib/samba/sysvol/brockley.harte-lyne.ca/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
dig reports this for BRDC-01
# dig @brdc-01 brdc-01.brockley.harte-lyne.ca
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> @brdc-01
brdc-01.brockley.harte-lyne.ca
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39355
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;brdc-01.brockley.harte-lyne.ca. IN A
;; ANSWER SECTION:
brdc-01.brockley.harte-lyne.ca. 3600 IN A 192.168.216.66
;; Query time: 0 msec
;; SERVER: 192.168.216.66#53(192.168.216.66)
;; WHEN: Tue Feb 4 09:16:43 2014
;; MSG SIZE rcvd: 64
I have searched for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE and other than my own
earlier report I have only found a reference to a printer problem. Does
anyone have any idea what the problem is that I have encountered or have any
ideas on how to solve it?
--
*** E-Mail is NOT a SECURE channel ***
James B. Byrne mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
More information about the samba
mailing list