[Samba] Restore samba4 backup

[Marc Muehlfeld]

Hello,

Am 17.07.2013 07:25, schrieb TI:
> Hi Marc,
>
> In the samba logs, I saw these errors:
>
> /usr/local/samba/sbin/samba_dnsupdate: Error reading smb_krb5 reply packet: NT_STATUS_CONNECTION_REFUSED from 10.1.1.12
> /usr/local/samba/sbin/samba_dnsupdate: Error reading smb_krb5 reply packet: NT_STATUS_CONNECTION_REFUSED from 10.1.1.200
> /usr/local/samba/sbin/samba_dnsupdate: Traceback (most recent call last):
> /usr/local/samba/sbin/samba_dnsupdate:   File "/usr/local/samba/sbin/samba_dnsupdate", line 509, in <module>
> /usr/local/samba/sbin/samba_dnsupdate:     get_credentials(lp)
> /usr/local/samba/sbin/samba_dnsupdate:   File "/usr/local/samba/sbin/samba_dnsupdate", line 122, in get_credentials
> /usr/local/samba/sbin/samba_dnsupdate:     creds.get_named_ccache(lp, ccachename)
> /usr/local/samba/sbin/samba_dnsupdate: RuntimeError: kinit for L01SAPP01$@INTRANET.ENXUTO.COM.BR failed (Cannot contact any KDC for requested realm)
> /usr/local/samba/sbin/samba_dnsupdate:
> Child /usr/local/samba/sbin/samba_dnsupdate exited with status 1 - Operation not permitted
> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - NT_STATUS_ACCESS_DENIED
>
> I think it happened because the new server has a different ip address. So, I ran /usr/local/samba/sbin/samba_dnsupdate and it has added the new ip address (10.1.1.150) to the list.

100%. I'll add this to the Wiki page, too. Make sure, you restore on a 
machine, that is 100% like the old in important things (IP, Hostname, 
Samba version, etc.)




> host l01sapp01.intranet.enxuto.com.br.
> l01sapp01.intranet.enxuto.com.br has address 10.1.1.12
> l01sapp01.intranet.enxuto.com.br has address 10.1.1.200
> l01sapp01.intranet.enxuto.com.br has address 10.1.1.150
>
> After that, the error has disappear and I could login again (it seems that the admin rights are back). However I couldn't run dsa.msc. I'll try translate the message I'm receiving:
>
> There is no User and Computer data available from Active Directory [l01sapp01.intranet.enxuto.com.br] in Domain Controler l01sapp01.intranet.enxuto.com.br. The server is reluctant in process your request.
>
> I think that the Windows Machine is trying to connect to 10.1.1.12 (which is the first response received from the internal dns server) instead of 10.1.1.150 (the last and the correct one)
>
> What do you think ?
>
> Could we remove the old records from dns server ? I'm using the internal server.

I wrote an Howto 
(http://wiki.samba.org/index.php/Change_IP_address_of_the_DC) about 
changing the IP on a DC a while ago. But I would not combine this with a 
restore. I think the highest priority should be to get your system 
restored, so that it is like the one you backuped. Later you can do changes.




Regards,
Marc