[Samba] Setup a Samba AD DC as an additional DC
L.P.H. van Belle
belle at bazuin.nl
Tue Nov 27 08:23:54 UTC 2018
I had a quick look.
Barry, can you get this script and run it.
Then post the results to the list.
It collects all info i need to have a better look.
I have a few ideas, this might be a resolving order problem, i've based on the errors below.
Can you also post the output of bind from the point its starting up until samba has started.
@Rowland, good morning, the one you got was send to soon...
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> > Rowland Penny via samba
> > Verzonden: maandag 26 november 2018 18:45
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] Setup a Samba AD DC as an additional DC
> > OK, I have been trying to help Barry get Samba to join to a Windows
> > domain as a DC and we seem to have chased it down to this:
> > ldb_wrap open of secrets.ldb
> > Could not find machine account in secrets database: Failed to fetch
> > machine account password for XXXXX from both secrets.ldb (Could not
> > find entry to match filter:
> > '(&(flatname=XXXXX)(objectclass=primaryDomain))' base: 'cn=Primary
> > Domains': No such object: dsdb_search
> > at ../source4/dsdb/common/util.c:4702) and
> > from /var/lib/samba/private/secrets.tdb:
> > NT_STATUS_CANT_ACCESS_DOMAIN_INFO ERROR(runtime): uncaught
> exception -
> > (9005, 'WERR_DNS_ERROR_RCODE_REFUSED') File
> "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177,
> > in _run return self.run(*args, **kwargs) File
> > "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py",
> > line 716, in
> > run backend_store=backend_store) File
> > "/usr/lib/python2.7/dist-packages/samba/join.py", line 1500,
> > in join_DC
> > ctx.do_join() File "/usr/lib/python2.7/dist-packages/samba/join.py",
> > line 1405, in do_join ctx.join_add_dns_records() File
> > "/usr/lib/python2.7/dist-packages/samba/join.py", line 1110, in
> > join_add_dns_records del_rec_buf)
> > He has examined the secrets.ldb and it doesn't contain the ' dn:
> > flatname=XXXXX,cn=Primary Domains' object, even if he deletes it, it
> > gets recreated without that object.
> > I have run out of ideas, I even joined a Samba machine to a
> > 2012 DC (2008 function level) without problem, anybody got
> any ideas ?
> > Rowland
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
More information about the samba