upgradeprovision failed
Matthieu Patou
mat at samba.org
Mon Jun 7 03:17:33 MDT 2010
On 07/06/2010 13:03, Matthias Dieter Wallnöfer wrote:
> Hi Rohit,
>
> this is a case which isn't handled yet by the actual upgradeprovision.
>
> You have to manually remove an entry called like this (I don't
> remember the exact denomination):
> CN=Well-Known-Security-Principal-System,CN=WellKnown Security
> Principals,CN=Configuration,DC=xxxxxx,DC=com. And then rerun
> upgradeprovision. This should work.
>
This won't work because the object will be moved in the deleted object
and when upgradeprovision will do its job it will fail to insert the new
object because of duplication of SID.
The best is not to run upgradeprovision for the moment.
Matthieu.
> Matthias
>
> Rohit Rajan wrote:
>> Hi All,
>>
>> The upgrade provision failed with the following error, the version of
>> samba i was upgrading is Version 4.0.0alpha12-GIT-e904443, with the
>> latest "git pull" today morning 07/06/2010 9 AM IST
>>
>>
>> ./scripting/bin/upgradeprovision --full -s /usr/local/samba/etc/smb.conf
>> Creating a reference provision
>> pdc_fsmo_init: no domain object present: (skip loading of domain
>> details)
>>
>> naming_fsmo_init: no partitions dn present: (skip loading of naming
>> contexts details)
>>
>> naming_fsmo_init: no partitions dn present: (skip loading of naming
>> contexts details)
>>
>> naming_fsmo_init: no partitions dn present: (skip loading of naming
>> contexts details)
>>
>> Copy samdb
>> Update partitions filename if needed
>> Doing schema update
>> There are 0 missing objects
>> There are 0 changed objects
>> Done with schema update
>> Scanning whole provision for updates and additions
>> CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=96541a16-910a-4b66-acde-720a0dff03c7,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=0fc5a978-0059-4b0a-9dc2-9896e8e389a1,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=6eb8eaf9-3403-4ba5-8b4b-ce349a4680ad,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=4d753a29-26ac-4d1a-bc80-311f947e4f0a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=560cf82d-9572-48a3-9024-6f2b56f1f866,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=abd97102-88dd-4013-a009-0e2c2f967ff6,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=bd3413c0-9559-469b-9f3d-51d7faabd81a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=d668ad1f-cedd-4565-ab02-9385926ce4f5,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=c03b1f37-c240-4910-93c8-1544a452b4b5,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=4c0672a2-437c-4944-b953-5db8f111d665,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=Reload-SSL-Certificate,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=System,CN=WellKnown Security
>> Principals,CN=Configuration,DC=xxxxxx,DC=com
>> CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=dcb3c95d-deb7-4c51-ad13-43a7d5d06fc7,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ef010a1e-bd88-48c8-a7af-2affd250d77d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=56040c71-fe93-4037-8fe9-1a4d1a283009,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=4c022fd1-adab-4d84-a7f1-9580f03da856,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=002fb291-0d00-4b0c-8c00-fe7f50ce6f8d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=8f86b825-c322-4101-adc4-579f12d445db,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=9fea28ff-387f-4d57-866d-3893c50f373f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=MS-TS-GatewayAccess,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=Private-Information,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=f814097b-3e3d-49ba-8a3a-092c25085f06,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=caa2bfad-0cca-483b-8d00-347f943292a8,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=613bd063-e8e9-4a62-8f4c-cda566f7eb6f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=10338d31-2423-4dff-b4b5-ef025144b01f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=07e57d28-ad40-44fc-8334-8a0dc119b3f4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=6fd48655-1698-497a-ac8d-8267ce01c80b,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=2b9e0609-6d75-498a-9727-c9fcc93f0e42,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=Terminal-Server-License-Server,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=3b3adbdb-4485-4559-aed8-9811c4bf90e4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ea08c04c-f474-4212-b19e-5e754f9210d4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>>
>> CN=2a858903-5696-4364-b4e5-4cac027ca7a6,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=a96e2ed5-7a7c-4d5c-9d5d-965eca0051da,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=429a6334-1a00-4515-bf48-676deb55954a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=782370ce-3d38-438d-8b0c-464220a3039d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>>
>> CN=Owner Rights,CN=WellKnown Security
>> Principals,CN=Configuration,DC=xxxxxx,DC=com
>> CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
>> Security,CN=System,DC=xxxxxx,DC=com
>> There are 78 missing objects
>> Traceback (most recent call last):
>> File "./scripting/bin/upgradeprovision", line 943, in ?
>> update_samdb(newpaths, paths, creds, session, names)
>> File "./scripting/bin/upgradeprovision", line 832, in update_samdb
>> hashSD =
>> check_diff_name(newpaths,paths,creds,session,str(names.rootdn),names,0)
>> File "./scripting/bin/upgradeprovision", line 634, in check_diff_name
>> add_missing_entries(newsam_ldb,sam_ldb,names,basedn,listMissing)
>> File "./scripting/bin/upgradeprovision", line 543, in
>> add_missing_entries
>> ret =
>> add_missing_object(newsam_ldb,sam_ldb,dn,names,basedn,hashMissing,index)
>> File "./scripting/bin/upgradeprovision", line 509, in
>> add_missing_object
>> sam_ldb.add(delta,["relax:0"])
>> _ldb.LdbError: (68, '../lib/ldb/ldb_tdb/ldb_index.c:1175: Failed to
>> re-index objectSid in CN=System,CN=WellKnown Security
>> Principals,CN=Configuration,DC=xxxxxx,DC=com -
>> ../lib/ldb/ldb_tdb/ldb_index.c:1107: unique index violation on
>> objectSid in CN=System,CN=WellKnown Security
>> Principals,CN=Configuration,DC=xxxxxx,DC=com')
>> A transaction is still active in ldb context [0xb827308] on
>> /usr/local/samba/private/sam.ldb
>>
>> This message may contain confidential, proprietary or legally
>> privileged information. In case you are not the original intended
>> recipient of the message, you must not, directly or indirectly, use,
>> disclose, distribute, print, or copy any part of this message and you
>> are requested to delete it and inform the sender.
>> Any views expressed in this message are those of the individual
>> sender unless otherwise stated. Nothing contained in this message
>> shall be construed as an offer or acceptance of any offer by
>> "Catalyst Business Partners" or any of its subsidiaries unless sent
>> with that express intent and with due authority of Catalyst Business
>> Partners.
>> Catalyst Business Partners has taken sufficient measures and
>> precautions to prevent the spread of viruses. However the company
>> accepts no liability for any damage caused by any virus transmitted
>> by this email.
>>
>>
>
--
Matthieu Patou
Samba Team http://samba.org
More information about the samba-technical
mailing list