[Samba] Unable to join samba4 to AD as a DC

[Andrew Bartlett]

On Tue, 2013-11-05 at 16:02 -0500, Michael Brown wrote:
> Hello,
> 
> I'm trying to get samba4 up and running as a DC in a lab environment.
> 
> I have a freshly installed AD environment (W2012R2 servers, W2008R2 
> functional level) and I'm trying to join samba4 to it as a domain 
> controller.
> 
> When I try, I get this:
> # samba-tool domain join ad.netdirect.ca DC -Uadministrator 
> --realm=AD.NETDIRECT.CA -W AD
> Finding a writeable DC for domain 'ad.netdirect.ca'
> Found DC AD2.ad.netdirect.ca
> Password for [AD\administrator]:
> workgroup is AD
> realm is ad.netdirect.ca
> checking sAMAccountName
> Adding CN=SAMBA1,OU=Domain Controllers,DC=ad,DC=netdirect,DC=ca
> Adding 
> CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> Adding CN=NTDS 
> Settings,CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> Join failed - cleaning up
> checking sAMAccountName
> Deleted CN=SAMBA1,OU=Domain Controllers,DC=ad,DC=netdirect,DC=ca
> Deleted 
> CN=SAMBA1,CN=Servers,CN=Lab,CN=Sites,CN=Configuration,DC=ad,DC=netdirect,DC=ca
> ERROR(<type 'exceptions.AttributeError'>): uncaught exception - 
> 'drsuapi.DsBindInfoFallBack' object has no attribute 'supported_extensions'
>    File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
> line 175, in _run
>      return self.run(*args, **kwargs)
>    File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 
> 552, in run
>      machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1104, in 
> join_DC
>      ctx.do_join()
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1007, in 
> do_join
>      ctx.join_add_objects()
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 525, in 
> join_add_objects
>      ctx.join_add_ntdsdsa()
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 458, in 
> join_add_ntdsdsa
>      ctx.DsAddEntry([rec])
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 368, in 
> DsAddEntry
>      ctx.drsuapi_connect()
>    File "/usr/lib/python2.7/dist-packages/samba/join.py", line 347, in 
> drsuapi_connect
>      (ctx.drsuapi_handle, ctx.bind_supported_extensions) = 
> drs_utils.drs_DsBind(ctx.drsuapi)
>    File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 144, 
> in drs_DsBind
>      return (handle, info.info.supported_extensions)
> 
> I notice that Mauricio Alverez had this problem before[1] but nobody 
> replied.
> 
> I've tried Ubuntu 12.04.03 (which couldn't even *install*), Ubuntu 13.04 
> (4.0.0+dfsg1-1ubuntu1) and Ubuntu 13.10 (4.0.3+dfsg1-0.1ubuntu1).
> 
> Both give the same error.
> 
> I then tried adding the Services for Unix extension (which I don't even 
> *know* if I did correctly*) to AD as a lark, but it didn't change anything.
> 
> So... anyone have ideas what's going wrong here?

I suspect our IDL for DSBindInfo is incorrect, or does not have the
level we need for 2012.  

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Catalyst IT                   http://catalyst.net.nz