[Samba] net vampire

[Michael Wood]

On 8 June 2010 08:31, Ibrahim Hamouda <ihamouda at itcanint.net> wrote:
> This is my first crack at samba4
> Downloaded via git couple hours ago
> followed the howto at http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Download_Samba4, and everything worked great.
> I was able to create my domain, join winxp and win 7 to it, manage the domain users and groups through winxp.
>
> I then followed the howto at http://wiki.samba.org/index.php/Samba4/Winbind to get my winbind working, and everything looks good.
>
> Started following the howto at http://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC to add another DC.
>
> ran the command:
> net vampire calgary.itcandox.loc -Uadministrator --realm=calgary.itcandox.loc --target-dir=/usr/local/samba/private/
>
> It always fail at the end with the following output:
>
> CLDAP response: forest=calgary.itcandox.loc dns=calgary.itcandox.loc netbios=CALGARY server_site=Default-First-Site-Name  client_site=Default-First-Site-Name
> Become DC [(null)] of Domain[CALGARY]/[calgary.itcandox.loc]
> Promotion Partner is Server[pdc1.calgary.itcandox.loc] from Site[Default-First-Site-Name]
> Options:crossRef behavior_version[2]
>        schema object_version[47]
>        domain behavior_version[2]
>        domain w2k3_update_revision[8]
> Provision for Become-DC test using python
> New Server in Site[Default-First-Site-Name]
> DSA Instance [(null)]
>        invocationId[None]
> Paths under targetdir[/usr/local/samba/private/]
> Setting up share.ldb
> Setting up secrets.ldb
> Setting up the registry
> Setting up the privileges database
> Setting up idmap db
> Setting up SAM db
> Setting up sam.ldb partitions and settings
> Setting up sam.ldb rootDSE
> Pre-loading the Samba 4 and AD schema
> Please install the phpLDAPadmin configuration located at /usr/local/samba/private/private/phpldapadmin-config.php into /etc/phpldapadmin/config.php
> Once the above files are installed, your Samba4 server will be ready to use
> Server Role:           domain controller
> Hostname:              PDC2
> NetBIOS Domain:        CALGARY
> DNS Domain:            calgary.itcandox.loc
> DOMAIN SID:            S-1-5-21-3652794813-3175583696-3763304489
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[133/1550] linked_values[0/0]
> Schema-DN[CN=Schema,CN=Configuration,DC=calgary,DC=itcandox,DC=loc] objects[87/1550] linked_values[0/0]
> Analyze and apply schema objects
> Failed to add prefixMap and schemaInfo Object class violation
> libnet_BecomeDC() failed - NT_STATUS_UNSUCCESSFUL
> Traceback (most recent call last):
>  File "bin/python/samba/netcmd/__init__.py", line 99, in _run
>    return self.run(*args, **kwargs)
>  File "bin/python/samba/netcmd/vampire.py", line 51, in run
>    (domain_name, domain_sid) = net.vampire(domain=domain, target_dir=target_dir)
> RuntimeError: NT_STATUS_UNSUCCESSFUL
>
>
> Any ideas of what am I doing wrong?

It looks like a recent commit broke this.  See this thread on samba-technical:

http://lists.samba.org/archive/samba-technical/2010-June/071438.html

-- 
Michael Wood <esiotrot at gmail.com>