[Samba] Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE

ash-samba at comtek.co.uk ash-samba at comtek.co.uk
Mon May 16 15:41:17 UTC 2016

>> Andrew Bartlett
> I haven't actually got ldbdump on the machine, and I can't see it in 
> the Debian packages. That said, I do appear to be able to add DNS 
> records now, so I'm assuming it was the index. If you particularly 
> want me to find out then I'll try to get a dump, but as long as its 
> working I'm happy to leave it be!
> Ash

Well, I will try to obtain that ldbdump

samba-tool dbcheck --reindex doesn't seem to have entirely worked. While 
we can add DNS records we can't add users. For example:

 > /usr/bin/samba-tool user add test.user --uid=test.user 
--random-password --uid-number=10226 --surname=user --given-name=test 
--job-title=Storekeeper --department=Repairs 
--mail-address=test.user at example.com --telephone-number=01244123456 
 > ERROR(ldb): Failed to add user 'test.user':  - 
../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=test 
user,CN=Users,DC=chester-dc,DC=example,DC=com - 
../ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in 
CN=test user,CN=Users,DC=chester-dc,DC=example,DC=com

We also can't add a DC:

 > samba-tool domain join chester-dc.example.com DC -Uash 
 > Finding a writeable DC for domain 'chester-dc.example.com'
 > Found DC empire.chester-dc.example.com
 > Password for [CHESTER-DC\ash]:
 > workgroup is CHESTER-DC
 > realm is chester-dc.example.com
 > checking sAMAccountName
 > Adding CN=V-WARD,OU=Domain Controllers,DC=chester-dc,DC=example,DC=com
 > Join failed - cleaning up
 > checking sAMAccountName
 > ERROR(ldb): uncaught exception - LDAP error 68 
LDAP_ENTRY_ALREADY_EXISTS -  <00002071: ../ldb_tdb/ldb_index.c:1216: 
Failed to re-index objectSid in CN=V-WARD,OU=Domain 
Controllers,DC=chester-dc,DC=example,DC=com - 
../ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in 
CN=V-WARD,OU=Domain Controllers,DC=chester-dc,DC=example,DC=com> <>
 >   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
line 175, in _run
 >     return self.run(*args, **kwargs)
 >   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", 
line 555, in run
 >     machinepass=machinepass, use_ntvfs=use_ntvfs, 
 >   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1172, 
in join_DC
 >     ctx.do_join()
 >   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1075, 
in do_join
 >     ctx.join_add_objects()
 >   File "/usr/lib/python2.7/dist-packages/samba/join.py", line 515, in 
 >     ctx.samdb.add(rec)

Or add a member:

 > root at p-bats:/etc/samba# net ads join -Uash
 > Enter ash's password:
 > Failed to join domain: failed to join domain 'CHESTER-DC.EXAMPLE.COM' 
over rpc: None of the information to be translated has been translated.

More information about the samba mailing list