[Samba] backup AD content

Fri Aug 30 13:52:19 UTC 2019

On 30.08.19 11:01, Andrew Bartlett wrote:

> I'm very sorry to advise that this script is not race-free in the
> locking done on the AD databases, which is why we have written the
> 'samba-tool domain backup offline' tool which holds the correct locks.
> 
> You should only need to back up the domain on one DC as long as you are
> confident the DC is correctly synchronised, including sysvol.

I tried that offline backup now, and as it throws an exception at the
end I'd like to share the output for your check if that is still OK (I'd
like backups and programs in general to run without errors ...)

->

root at adc1:~# samba-tool domain backup online --targetdir=/root/dc_backup
--server=adc1 -UAdministrator
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
Password for [ARBEITSGRUPPE\Administrator]:
workgroup is ARBEITSGRUPPE
realm is arbeitsgruppe.mydomain.at
Calling bare provision
lpcfg_load: refreshing parameters from
/root/dc_backup/tmprncCaw/etc/smb.conf
lpcfg_load: refreshing parameters from
/root/dc_backup/tmprncCaw/etc/smb.conf
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
ldb_wrap open of hklm.ldb
Key 'key=SOFTWARE,hive=NONE' not found
key added: key=SOFTWARE,hive=NONE
Key 'key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=Windows NT,key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=CurrentVersion,key=Windows
NT,key=Microsoft,key=SOFTWARE,hive=NONE' not found
key added: key=CurrentVersion,key=Windows
NT,key=Microsoft,key=SOFTWARE,hive=NONE
Key 'key=SYSTEM,hive=NONE' not found
key added: key=SYSTEM,hive=NONE
Key 'key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=ProductOptions,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added: key=Print,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Terminal
Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Terminal
Server,key=Control,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key 'key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE' not found
key added: key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Parameters,key=Netlogon,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Key
'key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE'
not found
key added:
key=Parameters,key=Alerter,key=Services,key=CurrentControlSet,key=SYSTEM,hive=NONE
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
partition_metadata: Migrating partition metadata: open of metadata.tdb
gave: (null)
Unable to determine the DomainSID, can not enforce uniqueness constraint
on local domainSIDs

A Kerberos configuration suitable for Samba AD has been generated at
/root/dc_backup/tmprncCaw/private/krb5.conf
Merge the contents of this file with your system krb5.conf or replace it
with this one. Do not create a symlink!
Provision OK for domain DN DC=arbeitsgruppe,DC=mydomain,DC=at
Starting replication
Using DS_BIND_GUID_W2K3
Using binding ncacn_ip_tcp:adc1[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[402/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[804/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1206/1552] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1552/1552] linked_values[0/0]
Analyze and apply schema objects
Replicated 1552 objects (0 linked attributes) for
CN=Schema,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[402/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[804/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1206/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1609/1624] linked_values[0/9]
Replicated 403 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[1624/1624] linked_values[28/28]
Missing target while attempting to apply records: Deleted target CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
GUID b0ca200f-4015-48e5-aa9e-2d85768ce6c2 linked from
CN=ccde0790-f7cc-449e-97a5-93993d2bb083,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at

Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2026/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2428/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[2830/1624] linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[3233/1624] linked_values[0/9]
Replicated 403 objects (0 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[3248/1624] linked_values[28/28]
Replicated 15 objects (28 linked attributes) for
CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Replicating critical objects from the base DN of the domain
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[97/97]
linked_values[27/27]
Replicated 97 objects (27 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[499/477]
linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=arbeitsgruppe,DC=mydomain,DC=at] objects[574/477]
linked_values[114/114]
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:WSMAN/ID15018.ARBEITSGRUPPE.mydomain.AT
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:WSMAN/ID15018
../ldb_tdb/ldb_index.c:2362: duplicate attribute value in
CN=ID15018,OU=IKW Computer,DC=arbeitsgruppe,DC=mydomain,DC=at for index
on servicePrincipalName, duplicate of objectGUID
fe9ad3cb-4c4d-439f-8d06-c0789101de78 in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/ID15018.ARBEITSGRUPPE.mydomain.AT
Replicated 75 objects (114 linked attributes) for
DC=arbeitsgruppe,DC=mydomain,DC=at
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[111/111] linked_values[0/0]
Replicated 111 objects (0 linked attributes) for
DC=DomainDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Replicating DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Partition[DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at]
objects[22/22] linked_values[0/0]
Replicated 22 objects (0 linked attributes) for
DC=ForestDnsZones,DC=arbeitsgruppe,DC=mydomain,DC=at
Committing SAM database
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-HasDomainNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to serverReference on
CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to siteList on
CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to hasMasterNCs on CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-HasDomainNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to msDS-hasMasterNCs on
CN=NTDS
Settings,CN=ADC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
replmd_allow_missing_target: CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
is Deleted but up to date. Ignoring link from
CN=ccde0790-f7cc-449e-97a5-93993d2bb083,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
replmd_allow_missing_target: CN=NTDS
Settings\0ADEL:b0ca200f-4015-48e5-aa9e-2d85768ce6c2,CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
is Deleted but up to date. Ignoring link from
CN=4a9eb36e-e26a-4963-a6fa-8881304bc16c,CN=Partitions,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at
Discarding older DRS linked attribute update to member on CN=Pre-Windows
2000 Compatible Access,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Group
Policy Creator Owners,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Enterprise
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
dc732e2f-383e-4241-843e-d071d15caf41
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Domain
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Denied RODC
Password Replication Group,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Guests,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Guests,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Schema
Admins,CN=Users,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on CN=Windows
Authorization Access Group,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at
from c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=IIS_IUSRS,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Users,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Discarding older DRS linked attribute update to member on
CN=Administrators,CN=Builtin,DC=arbeitsgruppe,DC=mydomain,DC=at from
c93692f6-4a12-41c3-b622-9593650dd565
Setting isSynchronized and dsServiceName
Cloned domain ARBEITSGRUPPE (SID S-1-5-21-2777655458-4002997014-749295002)
resolve_lmhosts: Attempting lmhosts lookup for name adc1<0x20>
ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index
out of range
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
178, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py",
line 237, in run
    new_sid = get_sid_for_restore(remote_sam)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain_backup.py",
line 73, in get_sid_for_restore
    rid = int(res[0].get('rIDNextRID')[0])