[Samba] Joining DC

[Alex Ferrara]

On 05/08/2013, at 7:03 AM, Mike Ray <mray at xes-inc.com> wrote:

> Alex-
> 
> A few things:
> 
> 1) Don't run DCs on the same domain with different versions of Samba. Either add in another 4.0.1 DC and replicate, or use the backup tool to create a copy of the database first.
> 2) CN=DeletedObjects is hidden by design. You can view it using ldp.exe on a windows box (http://technet.microsoft.com/en-us/library/cc978013.aspx) and a google search will show you where to look for it in ASDIEdit.
> 3) In this instance, I see why you are trying to delete this item; in 99% of other cases though, the tombstone policy should take care of removing deleted objects.
> 
> Good luck,
> Mike Ray
> 
> From: "Alex Ferrara" <alex at receptiveit.com.au>
> To: "samba at lists.samba.org List" <samba at lists.samba.org>
> Sent: Sunday, August 4, 2013 3:03:11 PM
> Subject: Re: [Samba] Joining DC
> 
> Does nobody know how to manually remove items from Samba4 directory? I've tried using adsiedit but cn=deleted items doesn't show up.
> 
> Sent from my iPhone
> 
> On 02/08/2013, at 1:58 PM, Alex Ferrara <alex at receptiveit.com.au> wrote:
> 
> > I am having some trouble joining a new samba4 server as a DC. I am pretty sure this stems from trying to use OpenChange and subsequently removing it. The new samba4 machine is running 4.0.7 and the existing is running 4.0.1. I am a little hesitant to do an in-place upgrade of the last working DC, so I wanted a replica to fall back on in case things go bad.
> > 
> > Any help would be appreciated.
> > 
> > On the new machine
> > 
> >> samba-tool domain join domain.local DC -Uadministrator realm=domain.local --dns-backend=BIND9_DLZ
> > 
> > Finding a writeable DC for domain 'domain.local'
> > Found DC tachyon.domain.local
> > Password for [DOMAIN\administrator]:
> > workgroup is DOMAIN
> > realm is domain.local
> > checking sAMAccountName
> > Adding CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local
> > Adding CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
> > Adding CN=NTDS Settings,CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
> > Adding SPNs to CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local
> > Setting account password for NEXUS$
> > Enabling account
> > Calling bare provision
> > No IPv6 address will be assigned
> > Provision OK for domain DN DC=domain,DC=local
> > Starting replication
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[402/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[804/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1206/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1608/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2010/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2412/2620] linked_values[0/0]
> > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2620/2620] linked_values[0/0]
> > Analyze and apply schema objects
> > Join failed - cleaning up
> > checking sAMAccountName
> > Deleted CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local
> > Deleted CN=NTDS Settings,CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
> > Deleted CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
> > ERROR(runtime): uncaught exception - (8442, 'WERR_DS_DRA_INTERNAL_ERROR')
> >  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run
> >    return self.run(*args, **kwargs)
> >  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 552, in run
> >    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
> >  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1104, in join_DC
> >    ctx.do_join()
> >  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1009, in do_join
> >    ctx.join_replicate()
> >  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 734, in join_replicate
> >    replica_flags=ctx.replica_flags)
> >  File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 248, in replicate
> >    (level, ctr) = self.drs.DsGetNCChanges(self.drs_handle, req_level, req)
> > 
> > On the existing DC logs
> > 
> > [2013/08/02 13:53:04,  0] ../source4/rpc_server/drsuapi/getncchanges.c:220(get_nc_changes_build_object)
> >  ../source4/rpc_server/drsuapi/getncchanges.c:220: Failed to find attribute in schema for attrid 2786216 mentioned in replPropertyMetaData of CN=Recipient Update Service (DOMAIN)\0ADEL:cbf078d9-a0ff-4609-a05b-743816af619d,CN=Deleted Objects,CN=Configuration,DC=domain,DC=local
> > 
> > Alex Ferrara
> > Director
> > Receptive IT Solutions
> > 
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Thanks Mike,

It wasn't my intention to run different versions, but it seemed to be a good way to upgrade at the time. I will report back with my success/failure.

Alex Ferrara
Director
Receptive IT Solutions