[Samba] samba-tool domain backup ERROR

[Stefan Kania]

Hello,

we want to backup the AD-database with the samba-tool backup-option. We 
use Sernet-packages 4.9.4 we have two DCs if I do the backup on the same 
DC I got the following messages:
-----------------
root at dc-ste-01:~# samba-tool domain backup online --server=dc-ste-01 
--targetdir=. -U administrator
Password for [LF\administrator]:
....
Committing SAM database
Setting isSynchronized and dsServiceName
Cloned domain LF (SID S-1-5-21-2842440679-1648109622-3732055899)
ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index 
out of range
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 
177, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", 
line 237, in run
     new_sid = get_sid_for_restore(remote_sam)
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", 
line 73, in get_sid_for_restore
     rid = int(res[0].get('rIDNextRID')[0])

-----------------

If we do it on the other DC we got the following messages:
-----------------
root at dc-ste-01:~# samba-tool domain backup online --server=dc-ibb-01 
--targetdir=. -U administrator
Password for [LF\administrator]:
Committing SAM database
Setting isSynchronized and dsServiceName
Cloned domain LF (SID S-1-5-21-2842440679-1648109622-3732055899)
ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A 
process has requested access to an object but has not been granted those 
access rights.')
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 
177, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py", 
line 243, in run
     backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid())
   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 508, in 
backup_online
     ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True)
   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 331, in 
get_acl
     smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS)

-----------------
the package "lmdb-utils" is installed on both DCs.

Any tip?

Stefan