[Samba] Setup a Samba AD DC as an additional DC

[L.P.H. van Belle]

Hai, 

I had a quick look. 

Barry, can you get this script and run it.
https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh
Then post the results to the list.  
It collects all info i need to have a better look. 

I have a few ideas, this might be a resolving order problem, i've based on the errors below. 
Can you also post the output of bind from the point its starting up until samba has started. 

Greetz, 

Louis

P.s.
@Rowland, good morning, the one you got was send to soon... 


> 
> 
> 
> 
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> > Rowland Penny via samba
> > Verzonden: maandag 26 november 2018 18:45
> > Aan: samba at lists.samba.org
> > Onderwerp: Re: [Samba] Setup a Samba AD DC as an additional DC
> > 
> > 
> > OK, I have been trying to help Barry get Samba to join to a Windows
> > domain as a DC and we seem to have chased it down to this:
> > 
> >  ldb_wrap open of secrets.ldb
> > Could not find machine account in secrets database: Failed to fetch
> > machine account password for XXXXX from both secrets.ldb (Could not
> > find entry to match filter:
> > '(&(flatname=XXXXX)(objectclass=primaryDomain))' base: 'cn=Primary
> > Domains': No such object: dsdb_search
> > at ../source4/dsdb/common/util.c:4702) and
> > from /var/lib/samba/private/secrets.tdb:
> > NT_STATUS_CANT_ACCESS_DOMAIN_INFO ERROR(runtime): uncaught 
> exception -
> > (9005, 'WERR_DNS_ERROR_RCODE_REFUSED') File
> > 
> "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177,
> > in _run return self.run(*args, **kwargs) File
> > "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", 
> > line 716, in
> > run backend_store=backend_store) File
> > "/usr/lib/python2.7/dist-packages/samba/join.py", line 1500, 
> > in join_DC
> > ctx.do_join() File "/usr/lib/python2.7/dist-packages/samba/join.py",
> > line 1405, in do_join ctx.join_add_dns_records() File
> > "/usr/lib/python2.7/dist-packages/samba/join.py", line 1110, in
> > join_add_dns_records del_rec_buf)
> > 
> > He has examined the secrets.ldb and it doesn't contain the ' dn:
> > flatname=XXXXX,cn=Primary Domains' object, even if he deletes it, it
> > gets recreated without that object.
> > 
> > I have run out of ideas, I even joined a Samba machine to a
> > 2012 DC (2008 function level) without problem, anybody got 
> any ideas ?
> > 
> > Rowland
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> > 
>