[Samba] FSMO Transfer fail

[Anderson Hoffmann do Carmo]

Hi for All!

I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04
as secundary DC with Samba 4.3.9 (from repository/apt-get).
During a migration test of FSMO roles I received an error from Samba:

root at gteste2:~# samba-tool fsmo transfer --role=all
ERROR: Failed to delete role 'domaindns': LDAP error 50
LDAP_INSUFFICIENT_ACCESS_RIGHTS -  <00002098: SecErr: DSID-0315211E,
problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
root at gteste2:~#


After this, I am getting the error below:

root at gteste2:~# samba-tool fsmo show
ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element'
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", line 396,
in run
    domaindnszonesMaster = get_fsmo_roleowner(samdb, domaindns_dn)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/fsmo.py", line 43, in
get_fsmo_roleowner
    master_owner = res[0]["fSMORoleOwner"][0]
root at gteste2:~#


My samba config is:

root at gteste2:~# cat /etc/samba/smb.conf
# Global parameters
[global]
        workgroup = TESTEAD
        realm = testead.gsurfnet.com
        netbios name = GTESTE2
        interfaces = lo ens33
        bind interfaces only = Yes
        server role = active directory domain controller
        dns forwarder = 8.8.8.8

[netlogon]
        path = /var/lib/samba/sysvol/testead.gsurfnet.com/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
root at gteste2:~#



I do not know what to do... :-(


Anderson Hoffmann