[Samba] samba-tool domain backup online errors

James Atwell james.atwell365 at gmail.com
Mon Nov 5 18:14:04 UTC 2018


Hello,

Attempting to run

samba-tool domain backup online --server=pfdc1.domain.local 
--targetdir=/backups/ -U administrator

gives the following errors.

Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint 
on local domainSIDs

Partition[DC=domain,DC=local] objects[1716/1738] linked_values[0/839]
../lib/ldb/ldb_tdb/ldb_index.c:2352: duplicate attribute value in 
CN=MRLENOVO-1,OU=Computers,OU=Records,OU=SITEA,DC=domain,DC=local for 
index on servicePrincipalName, duplicate of objectGUID 
6f7a7d42-5a8e-4329-a6ff-083ff10a9d2b in 
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/MRLENOVO-1.domain.LOCAL

Cloned domain DOMAIN (SID S-1-5-21-940051827-2291820289-3341758437)
ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A 
process has requested access to an object but has not been granted those 
access rights.')
   File 
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", 
line 177, in _run
     return self.run(*args, **kwargs)
   File 
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain_backup.py", 
line 242, in run
     backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid())
   File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py", 
line 499, in backup_online
     ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True)
   File "/usr/local/samba/lib/python2.7/site-packages/samba/ntacls.py", 
line 322, in get_acl
     smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS)


I am running this command from the DC I wish to make the backup of. 
Should I be running this from a remote DC? Thanks.




More information about the samba mailing list