Upgrade leaves an inoperate Administrator account [Was: Upgrade from S3 to a Samba4 DC]
Adam Tauno Williams
awilliam at whitemice.org
Mon Sep 19 14:03:20 MDT 2011
Quoting Adam Tauno Williams <awilliam at whitemice.org>:
> Quoting Adam Tauno Williams <awilliam at whitemice.org>:
>> Quoting Adam Tauno Williams <awilliam at whitemice.org>:
>>> Quoting Adam Tauno Williams <awilliam at whitemice.org>
>>>> Quoting Andrew Bartlett <abartlet at samba.org>:
>>>>> The command has also been renamed in preparation for the Samba 4.0 alpha
>>>>> 17 release, it is now 'samba domain samba3upgrade'.
>>>> I'm puzzled by how to read that. Does that mean I use the
>>>> "samba" program to invoke the upgrade? After a git pull the
>>>> previous upgrade script is gone; but the syntax to get the same
>>>> functionality doesn't seem obvious.
>>>> /opt/s4/sbin/samba domain samba3upgrade --help
>>>> doesn't provide any insight.
>>> Ah ha! You meant "samba-tool domain samba3upgrade"
>> smbclient --version
>> Version 4.0.0alpha18-GIT-fa5475e
>> This works, with one bug. It doesn't generate an Administrator
>> password (which the previous script would auto-generate one).
>> $ export PATH=$PATH:/opt/s4/bin:/opt/s4/sbin
>> $ samba-tool domain samba3upgrade --libdir=/tmp/x /tmp/x/smb.conf
>> Server Role: domain controller
>> Hostname: BARBEL
>> NetBIOS Domain: BACKBONE
>> DNS Domain: micore.us
>> DOMAIN SID: S-1-5-21-2037442776-**************
>> Admin password: None <<<< ????
>> Importing WINS database
>> Importing Account policy
>> Which then leaves me puzzled how to set an administrator password.
>> "samba-tool domain samba3upgrade --help" doesn't mention a
>> parameter to predetermine one.
>> "samba-tool user password --username=administrator" prompts for a
>> password. Entering a blank password doesn't seem to explicitly
>> fail but the operation fails with -
>> ERROR: Failed to change password : Connection to SAMR pipe of PDC
>> of domain 'BACKBONE' failed: NT_STATUS_OBJECT_NAME_NOT_FOUND
> linux-hvej:~ # samba-tool domain samba3upgrade --libdir=/tmp/x
> --adminpass=somepassword /tmp/x/smb.conf
> Usage: samba-tool domain samba3upgrade [options] <samba3_smb_conf>
> samba-tool: error: no such option: --adminpass
I can't get to a working Administrator account.
--- set the administrator password with "setpassword"
linux-hvej:~ # /opt/s4/sbin/samba-tool user setpassword administrator
Changed password OK
--- kinit says my password expired, and can't change it (???)
linux-hvej:~ # kinit administrator at MICORE.US
Password for administrator at MICORE.US:
Password expired. You must change it now.
Enter new password:
Enter it again:
kinit: Password has expired while getting initial credentials
More information about the samba-technical