samba4 as DC in 2008 R2 Forest

[Kamen Mazdrashki]

Hi Scott,

I think you've hit certain deficiencies we have in replication code currently.
This error happen for sure when you try to replicate from an Exchange
provisioned AD.
If joining WinDC is the only think you want to test, then I could suggest
you to wait a little so that fixes make their way to master.
But if you need to test Samba4 further, I will send you an up-to-date patch
you can test with?


-- 
CU,
Kamen Mazdrashki


On Thu, Nov 18, 2010 at 19:17, Scott Smith <kazumawasd at yahoo.com> wrote:
> I am attempting to join samba4 as a DC in a 2008 R2 functional level forest. I have followed the samba4/HOWTO up to before the provisioning step and then followed samba4/HOWTO/Join a domain as a DC. I am using the newest version from the git repository. When I get to the join the existing domain step I receive an error about being unable to convert objects when I use the samba-tool join command.
>
> Here is the output:
>
> ./samba-tool join galt.com DC -Uadministrator --realm=galt.com
> writeable DC for domain 'galt.com'
> Found DC jupiter.galt.com
> Password for [GALT\administrator]:
> workgroup is GALT
> realm is galt.com
> checking samaccountname
> Adding CN=NYC,OU=Domain Controllers,DC=galt,DC=com
> Adding CN=NYC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=galt,DC=com
> Adding CN=NTDS Settings,CN=NYC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=galt,DC=com
> Adding CN=NYC,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=galt,DC=com
> Adding SPNs to CN=NYC,OU=Domain Controllers,DC=galt,DC=com
> Setting account password for NYC$
> Calling bare provision
> Provision OK for domain DN DC=galt,DC=com
> Starting replication
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[401] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[402] linked_values[0]
> Schema-DN[CN=Schema,CN=Configuration,DC=galt,DC=com] objects[128] linked_values[0]
> Analyze and apply schema objects
> Schema for DRS tests using python
> Can't continue Schema load: didn't manage to convert any objects: all 280 remaining of 3745 objects failed to convert
> Join failed - cleaning up
> checking samaccountname
> Deleted CN=NYC,OU=Domain Controllers,DC=galt,DC=com
> Deleted CN=NTDS Settings,CN=NYC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=galt,DC=com
> Deleted CN=NYC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=galt,DC=com
> Deleted CN=NYC,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=galt,DC=com
> Traceback (most recent call last):
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/netcmd/__init__.py", line 99, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/netcmd/join.py", line 64, in run
>     site=site, netbios_name=netbios_name)
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/join.py", line 552, in join_DC
>     ctx.do_join()
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/join.py", line 487, in do_join
>     ctx.join_replicate()
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/join.py", line 446, in join_replicate
>     replica_flags=ctx.replica_flags)
>   File "/usr/local/samba/lib/python2.5/site-packages/samba/drs_utils.py", line 172, in replicate
>     self.net.replicate_chunk(self.replication_state, level, ctr, schema=schema)
> TypeError: Failed to process chunk: NT_STATUS_INTERNAL_ERROR
>
>
>
> I thought the error was because of the functional level so tried to raise the samba4 domain and forest functional level by provisioning samba4 and then using the samba-tool domainlevel script. The function level raises successfully but when I attempt to join as a DC with samba-tool join I receive the same error. Am I going about this process correctly?
> Any help is appreciated.
>
>
>
>
>
>