[Samba] I can't join to an existing domain (yet)

[Rowland Penny]

On 13/02/15 13:22, Denis Morejon Lopez wrote:
>
> People:
>
> I have not solved my problem. I have only one DC with Zentyal 3.4 and 
> I want to change it by samba 4.1.16. That's why if I can't join the 
> samba to the existing domain I would not do anything else.
>
> The samba server error is this:
> (Command from samba)
> samba-tool domain join dtcf.etecsa.cu DC -U administrator 
> --realm=DTCF.ETECSA.CU --dns-backend=BIND9_DLZ
>
> (Response)
> No objectClass found in replPropertyMetaData for 
> CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu!
>
> Failed to apply records: replmd_replicated_apply_add: error during DRS 
> repl ADD: No objectClass found in replPropertyMetaData for 
> CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu!
> : Object class violation
> Failed to commit objects: WERR_GENERAL_FAILURE
> Join failed - cleaning up
>
> I can see this entry in the Zentyal server
> (Command from Zentyal)
>  ldbsearch -H /var/lib/samba/private/sam.ldb 
> '(CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5)'
>
> (Response)
> # record 1
> dn: 
> CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu
> cn:: 
> UEMwMDAxNzEwNDMzNgpDTkY6NTc5ODQyNWEtZGIzMC00ZjM5LTk4ZWQtNmU4YWExNWMzNGI1
> instanceType: 4
> whenChanged: 20140811142141.0Z
> uSNCreated: 3996
> uSNChanged: 3996
> name:: 
> UEMwMDAxNzEwNDMzNgpDTkY6NTc5ODQyNWEtZGIzMC00ZjM5LTk4ZWQtNmU4YWExNWMzNGI
>  1
> objectGUID: 5798425a-db30-4f39-98ed-6e8aa15c34b5
> distinguishedName: 
> CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5
>  ,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu
>
> But I can't delete it
> (Command from Zentyal)
> ldbdel -H /var/lib/samba/private/sam.ldb 
> 'CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu'
>
> (Response)
> delete of 
> 'CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu' 
> failed - (No such object) objectclass: Cannot delete 
> CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu, 
> entry does not exist!
>
> So, I tried all ldbdel options looking for one that forces the 
> deletion. And I found "--relax"
> (Command from Zentyal)
>  ldbdel --relax -H /var/lib/samba/private/sam.ldb 
> 'CN=PC00017104336\0ACNF:5798425a-db30-4f39-98ed-6e8aa15c34b5,CN=PC009375,CN=Computers,DC=dtcf,DC=etecsa,DC=cu'
>
> (Response)
> ===============================================================
> INTERNAL ERROR: Signal 11 in pid 26667 (4.1.5-Zentyal)
> Please read the Trouble-Shooting section of the Samba HOWTO
> ===============================================================
> PANIC: internal error
> Aborted (core dumped)
>
> I repeated the operation stopping samba daemon but the I got the same 
> response.
>
> Event, I could delete other entries with the pattern '(CN=*CNF:*)' as 
> Rowland taught me. But only 10 are not erasable like the one I write 
> here.
>
> Is it imposible to delete these bad entries ??
>

Have a look here: http://support.microsoft.com/kb/297083

Not sure if this will help, but it sounds plausible.

Rowland