[Samba] Samba 3 classicupgrade to Samba AD

[Max Olivas]

Here is the whole command I am testing:
 
root at telluride:/usr/local/samba# /usr/local/samba/bin/samba-tool domain classicupgrade --dbdir /root/old-samba/ --use-xattrs=yes --realm=ntserv.local /root/old-samba/smb.conf
Reading smb.conf
Processing section "[netlogon]"
Unknown parameter encountered: "share modes"
Ignoring unknown parameter "share modes"
Provisioning
Exporting account policy
Exporting groups
Exporting users
Ignoring group memberships of 'L-LECHUGA$' S-1-5-21-684095783-2094215992-774919444-1995: Unable to enumerate group memberships, (-1073741724,No such user)
Ignoring group memberships of 'ahendrickson' S-1-5-21-684095783-2094215992-774919444-1921: Unable to enumerate group memberships, (-1073741724,No such user)
 
......  a whole bunch of similar errors........
 
Ignoring group memberships of 'S-GURULE$' S-1-5-21-684095783-2094215992-774919444-1658: Unable to enumerate group memberships, (-1073741724,No such user)
Next rid = 6155
Exporting posix attributes
Reading WINS database
Cannot open wins database, Ignoring: [Errno 2] No such file or directory: '/root/old-samba/wins.dat'
lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Processing section "[netlogon]"
Processing section "[sysvol]"
Module 'acl_xattr' loaded
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
partition_metadata: Migrating partition metadata
Adding DomainDN: DC=ntserv,DC=local
DN: DC=ntserv,DC=local is a NC
Adding configuration container
DN: CN=Configuration,DC=ntserv,DC=local is a NC
Setting up sam.ldb schema
DN: CN=Schema,CN=Configuration,DC=ntserv,DC=local is a NC
Setting up sam.ldb configuration data
Setting up display specifiers
Adding users container
Modifying users container
Adding computers container
Modifying computers container
Setting up sam.ldb data
Setting up well known security principals
Setting up sam.ldb users and groups
Setting up self join
Setting acl on sysvol skipped
Adding DNS accounts
Creating CN=MicrosoftDNS,CN=System,DC=ntserv,DC=local
Creating DomainDnsZones and ForestDnsZones partitions
DN: DC=DomainDnsZones,DC=ntserv,DC=local is a NC
DN: DC=ForestDnsZones,DC=ntserv,DC=local is a NC
Populating DomainDnsZones and ForestDnsZones partitions
Setting up sam.ldb rootDSE marking as synchronized
Fixing provision GUIDs
A Kerberos configuration suitable for Samba 4 has been generated at /usr/local/samba/private/krb5.conf
Setting up fake yp server settings
Once the above files are installed, your Samba4 server will be ready to use
Admin password:        5]9+V=xFXT9sixJ+o0!4O
Server Role:           active directory domain controller
Hostname:              telluride
NetBIOS Domain:        NTSERV
DNS Domain:            ntserv.local
DOMAIN SID:            S-1-5-21-684095783-2094215992-774919444
Importing WINS database
Importing Account policy
Importing idmap database
Processing section "[netlogon]"
Processing section "[sysvol]"
Importing groups
Importing users
Adding users to groups
Processing section "[netlogon]"
Processing section "[sysvol]"
idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED
set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
ERROR(runtime): uncaught exception - (-1073741734, 'NT_STATUS_INVALID_OWNER')
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line 1318, in run
    useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/upgrade.py", line 926, in upgrade_from_samba3
    result.names.domaindn, result.lp, use_ntvfs)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py", line 1476, in setsysvolacl
    setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py", line 154, in setntacl
    smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd)


Thank you again for your help on this.
 
Thanks,
Max
 
>>> Andrew Bartlett <abartlet at samba.org> 1/16/2013 2:24 PM >>>
On Wed, 2013-01-16 at 09:23 -0700, Max Olivas wrote:
> Is the workaround something I do or something that is fixed in the
> newer version?
>  
> Thanks,
> Max
> 
> >>> "Max Olivas " <molivas at northglenn.org> 1/15/2013 6:54 AM >>>
> Version 4.1.0pre1-GIT-94f11e9 on Ubuntu 12.04 LTS.
> 
> Thanks,
> Max
> 
> >>> Andrew Bartlett <abartlet at samba.org> 1/14/2013 3:01 PM >>>
> On Mon, 2013-01-14 at 14:14 -0700, Max Olivas wrote:
> > Hey All,
> >  
> > Thanks for the feedback.  I've cleaned up my .tdb files some and
> have
> > moved farther with the upgrade command but I'm still getting errors.
> > This is what I'm getting now:
> >  
> > idmapping sid_to_xid failed for id[0]=S-1-5-32-544:
> > NT_STATUS_NONE_MAPPED
> > set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
> > ERROR(runtime): uncaught exception - (-1073741734,
> > 'NT_STATUS_INVALID_OWNER')
> >   File
> >

Looking more closely at the error, this is different.  Is there more
detail to the error than what you pasted?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org