[Samba] Unable to join samba4 to AD as a DC
Andrew Bartlett
abartlet at samba.org
Tue Nov 5 20:56:25 MST 2013
On Tue, 2013-11-05 at 16:02 -0500, Michael Brown wrote:
> Hello,
>
> I'm trying to get samba4 up and running as a DC in a lab environment.
>
> I have a freshly installed AD environment (W2012R2 servers, W2008R2
> functional level) and I'm trying to join samba4 to it as a domain
> controller.
>
> When I try, I get this:
> # samba-tool domain join ad.netdirect.ca DC -Uadministrator
> --realm=AD.NETDIRECT.CA -W AD
> Finding a writeable DC for domain 'ad.netdirect.ca'
> Found DC AD2.ad.netdirect.ca
> Password for [AD\administrator]:
> workgroup is AD
> realm is ad.netdirect.ca
> checking sAMAccountName
> Adding CN=SAMBA1,OU=Domain Controllers,DC=ad,DC=netdirect,DC=ca
> Adding
> CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> Adding CN=NTDS
> Settings,CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> Join failed - cleaning up
> checking sAMAccountName
> Deleted CN=SAMBA1,OU=Domain Controllers,DC=ad,DC=netdirect,DC=ca
> Deleted
> CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> ERROR(<type 'exceptions.AttributeError'>): uncaught exception -
> 'drsuapi.DsBindInfoFallBack' object has no attribute 'supported_extensions'
> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
> line 175, in _run
> return self.run(*args, **kwargs)
> File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
> 552, in run
> machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1104, in
> join_DC
> ctx.do_join()
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1007, in
> do_join
> ctx.join_add_objects()
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 525, in
> join_add_objects
> ctx.join_add_ntdsdsa()
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 458, in
> join_add_ntdsdsa
> ctx.DsAddEntry([rec])
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 368, in
> DsAddEntry
> ctx.drsuapi_connect()
> File "/usr/lib/python2.7/dist-packages/samba/join.py", line 347, in
> drsuapi_connect
> (ctx.drsuapi_handle, ctx.bind_supported_extensions) =
> drs_utils.drs_DsBind(ctx.drsuapi)
> File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 144,
> in drs_DsBind
> return (handle, info.info.supported_extensions)
>
> I notice that Mauricio Alverez had this problem before[1] but nobody
> replied.
>
> I've tried Ubuntu 12.04.03 (which couldn't even *install*), Ubuntu 13.04
> (4.0.0+dfsg1-1ubuntu1) and Ubuntu 13.10 (4.0.3+dfsg1-0.1ubuntu1).
>
> Both give the same error.
>
> I then tried adding the Services for Unix extension (which I don't even
> *know* if I did correctly*) to AD as a lark, but it didn't change anything.
>
> So... anyone have ideas what's going wrong here?
I suspect our IDL for DSBindInfo is incorrect, or does not have the
level we need for 2012.
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz
More information about the samba
mailing list