[Samba] LDAP broken after AD DC upgrade from 4.7 to 4.8

[Rowland Penny]

On Fri, 25 May 2018 22:04:28 +0200
Bastian Machek via samba <samba at lists.samba.org> wrote:

> Hi *,
> 
> I just upgraded my AD DC from 4.7.6 to 4.8.1. (Arch Linux)

Is this using Arch Linux packages ? if so, you might want to tell them
that using 4.8.0 or 4.8.1 to upgrade a DC is a BAD idea.

> After a reboot my LDAP database is almost empty, when accessed from a 
> LDAP browser or dsa.msc.
> 
> samba-tool dbcheck --fix fails as even LostAndFound isn't there
> anymore. ERROR(ldb): uncaught exception - descriptor_modify on 
> CN=SERVER,CN=LostAndFound,DC=dschungel,DC=local failed: No such Base
> DN: CN=LostAndFound,DC=dschungel,DC=local
>    File "/usr/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> line 176, in _run
>      return self.run(*args, **kwargs)
>    File "/usr/lib/python2.7/site-packages/samba/netcmd/dbcheck.py",
> line 157, in run
>      controls=controls, attrs=attrs)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
> 218, in check_database
>      error_count += self.check_object(object.dn, attrs=attrs)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
> 2308, in check_object
>      self.err_missing_parent(obj)
>    File "/usr/lib/python2.7/site-packages/samba/dbchecker.py", line
> 817, in err_missing_parent
> 
> 
> Funny thing is, if I do ldbsearch on my files in 
> /var/lib/samba/private/sam.ldb.d/ everything still seems to be there.
> 
> Did anybody have any similar problems?

Oh lots of people, run 'sambaundoguididx' then downgrade Samba again.
You can use 4.8.2 to upgrade after the downgrade.

Rowland