[Samba] Import idmap database error on classicupgrade process

Rowland Penny rowlandpenny at googlemail.com
Thu May 21 13:33:52 MDT 2015 

On 21/05/15 19:24, Elias Pereira wrote:
>> Then why can the upgrade not contact the ldap server ?
> I dont know! :(
>
> Was ldap running on another computer before ?
>
> I installed a temporary openLDAP backend on the new host.

After examining upgrade.py, it would seem that you don't need much of 
your original smb.conf, I am sending you a cut down smb.conf to try.

Have another read of the samba wiki page:

https://wiki.samba.org/index.php/Samba_Classic_Upgrade_%28NT4-style_domain_to_AD%29

Double check that you have done everything that pages suggests and then 
try again with the smb.conf I will send you.

If, as I hope, you are testing this in a VM (or similar) do the testing 
in a terminal where you have logged into the VM as root via ssh. You 
will then be able to cut & paste the output into an email. If you are 
still having problems, send the output direct to me.

Rowland

>
> Can you post the smb.conf from the old PDC ? the one you are trying to
>> upgrade from.
> I sent my smb.conf to your private e-mail.
>
> On Thu, May 21, 2015 at 3:08 PM, Rowland Penny <rowlandpenny at googlemail.com>
> wrote:
>
>> On 21/05/15 18:46, Elias Pereira wrote:
>>
>>> Is ldap running on the computer you are trying to run the classicupgrade
>>>> on?
>>>>
>>> Yes.
>>>
>> Then why can the upgrade not contact the ldap server ?
>>
>> Was ldap running on another computer before ?
>>
>> Can you post the smb.conf from the old PDC ? the one you are trying to
>> upgrade from.
>>
>> Rowland
>>
>>   I need to modify other files too?
>>> On Thu, May 21, 2015 at 2:39 PM, Rowland Penny <
>>> rowlandpenny at googlemail.com>
>>> wrote:
>>>
>>>   On 21/05/15 18:22, Elias Pereira wrote:
>>>>   Ok. I uncomment that line and put:
>>>>> passdb backend   = ldapsam:ldap://127.0.0.1
>>>>>
>>>>>   Is ldap running on the computer you are trying to run the
>>>> classicupgrade
>>>> on ?
>>>>
>>>> It needs to connect to the ldap server, so if the ldap server is running
>>>> on another computer, you need to use either the FQDN of that computer or
>>>> its ipaddress.
>>>>
>>>> Rowland
>>>>
>>>>
>>>>
>>>>
>>>>   Error message:
>>>>>
>>>>> Provisioning
>>>>>
>>>>>   smbldap_search_domain_info: Searching
>>>>>> for:[(&(objectClass=sambaDomain)(sambaDomainName=EMPRESA))]
>>>>>> smbldap_open_connection: connection opened
>>>>>> failed to bind to server ldap://127.0.0.1 with
>>>>>> dn="cn=Manager,dc=empresa,dc=com" Error: Invalid credentials
>>>>>> (unknown)
>>>>>>
>>>>>>
>>>>> On Thu, May 21, 2015 at 1:53 PM, Rowland Penny <
>>>>> rowlandpenny at googlemail.com>
>>>>> wrote:
>>>>>
>>>>>    On 21/05/15 17:28, Elias Pereira wrote:
>>>>>
>>>>>>    You're right, man! Sorry! My mistake!
>>>>>>
>>>>>>> I put that file because I read in somewhere about the persistent and
>>>>>>> temporary files regarding .tdb files. The winbindd_idamp.tbm was on
>>>>>>> that
>>>>>>> list, and I think that's why I left it in the folder. :D
>>>>>>>
>>>>>>> Another doubt. For the provisioning starts, I had to comment out the
>>>>>>> line
>>>>>>> referring to the ldap backend in the smb.conf of samba3.
>>>>>>>
>>>>>>> # passdb backend   = ldapsam:ldap://empresa.com
>>>>>>>
>>>>>>> This can affect the provisioning?
>>>>>>>
>>>>>>>    Possibly, without that line I don't think it will contact the ldap
>>>>>>>
>>>>>> server,
>>>>>> but 'ldap://empresa.com' doesn't look right, I would expect something
>>>>>> like 'ldap://ldapdc.empresa.com'  or 'ldap://127.0.0.1' i.e a
>>>>>> resolvable
>>>>>> dns address.
>>>>>>
>>>>>> Rowland
>>>>>>
>>>>>>
>>>>>>    On Thu, May 21, 2015 at 12:48 PM, Rowland Penny <
>>>>>>
>>>>>>> rowlandpenny at googlemail.com
>>>>>>>
>>>>>>>    wrote:
>>>>>>>
>>>>>>>> On 21/05/15 16:31, Elias Pereira wrote:
>>>>>>>>
>>>>>>>>     I copied all the database files of samba3 as is mentioned in the
>>>>>>>> wiki -
>>>>>>>>
>>>>>>>>   The
>>>>>>>>> classicupgrade process
>>>>>>>>> <
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> https://wiki.samba.org/index.php/Samba_Classic_Upgrade_(NT4-style_domain_to_AD)#The_classicupgrade_process
>>>>>>>>>
>>>>>>>>> But if the winbindd_idmap.tdb file is in the folder, the errors
>>>>>>>>> occur.
>>>>>>>>> See
>>>>>>>>> below:
>>>>>>>>>
>>>>>>>>> Importing idmap database
>>>>>>>>>
>>>>>>>>>     ERROR(assert): uncaught exception
>>>>>>>>>
>>>>>>>>>         File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
>>>>>>>>>> line 175, in _run
>>>>>>>>>>          return self.run(*args, **kwargs)
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
>>>>>>>>>> line 1452, in run
>>>>>>>>>>          useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/upgrade.py",
>>>>>>>>>> line
>>>>>>>>>> 749, in upgrade_from_samba3
>>>>>>>>>>          import_idmap(result.idmap, samba3, logger)
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/upgrade.py",
>>>>>>>>>> line
>>>>>>>>>> 215, in import_idmap
>>>>>>>>>>          samba3_idmap = samba3.get_idmap_db()
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/samba3/__init__.py",
>>>>>>>>>> line 406, in get_idmap_db
>>>>>>>>>>          return IdmapDatabase(self.statedir_path("winbindd_idmap"))
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/samba3/__init__.py",
>>>>>>>>>> line 63, in __init__
>>>>>>>>>>          self._check_version()
>>>>>>>>>>        File
>>>>>>>>>> "/opt/samba/lib/python2.7/site-packages/samba/samba3/__init__.py",
>>>>>>>>>> line 146, in _check_version
>>>>>>>>>>          assert fetch_int32(self.db, "IDMAP_VERSION\0") ==
>>>>>>>>>> IDMAP_VERSION_V2
>>>>>>>>>>
>>>>>>>>>>     If I remove/delete the file, the provisioning continues and
>>>>>>>>>> tells
>>>>>>>>>> me
>>>>>>>>>>
>>>>>>>>>>   he
>>>>>>>>> did
>>>>>>>>> not find the file: *Can not open database idmap, Ignoring: [Errno 2]
>>>>>>>>> No
>>>>>>>>> such file or directory*
>>>>>>>>>
>>>>>>>>> Can I still provisioning without the file? There is the possibility
>>>>>>>>> of
>>>>>>>>> post-migration issues regarding lack of this file?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>     Hi, on the wiki page, it tells you to copy:
>>>>>>>>>
>>>>>>>>>   secrets.tdb
>>>>>>>> schannel_store.tdb
>>>>>>>> passdb.tdb
>>>>>>>> gencache_notrans.tdb
>>>>>>>> group_mapping.tdb
>>>>>>>> account_policy.tdb
>>>>>>>>
>>>>>>>> It does not mention 'winbindd_idmap.tdb'.
>>>>>>>>
>>>>>>>> So why are you including it ?
>>>>>>>>
>>>>>>>> Rowland
>>>>>>>> --
>>>>>>>> To unsubscribe from this list go to the following URL and read the
>>>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>     --
>>>>>> To unsubscribe from this list go to the following URL and read the
>>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>>>
>>>>>>
>>>>>>
>>>>>   --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>>
>>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>

More information about the samba mailing list