[Samba] Error samba backup 4.10.5

Trenta sis trenta.sis at gmail.com
Thu Jul 4 19:19:47 UTC 2019


Hi,

Error was reproduced with ssamba 4.10.5 a fresh domain and  also with
migrated NT domain with Debian 8
Tried to upgrade debian 8 to debian 9 using this required dependencies
https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/debian9/bootstrap.sh;hb=master
and error persist with debian 9 and samba 4.10.5 recomnpiled, same
error with backup offline, started or stopped

At this moment using old samba_backup as workaround, is this right?

Any suggestions?


Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 4 de jul.
2019 a les 9:50:
>
> Hi,
>
> We were using samba_backup from 4.4.5 and after upgrade to 4.10.5 we
> are trying to configure new method, but is not working, tried:
>
> offline with samba stopped:
> # samba-tool domain backup offline --targetdir=/local/test/
> INFO: Current debug levels:
>   all: 5
>   tdb: 5
>   printdrivers: 5
>   lanman: 5
>   smb: 5
>   rpc_parse: 5
>   rpc_srv: 5
>   rpc_cli: 5
>   passdb: 5
>   sam: 5
>   auth: 5
>   winbind: 5
>   vfs: 5
>   idmap: 5
>   quota: 5
>   acls: 5
>   locking: 5
>   msdfs: 5
>   dmapi: 5
>   registry: 5
>   scavenger: 5
>   dns: 5
>   ldb: 5
>   tevent: 5
>   auth_audit: 5
>   auth_json_audit: 5
>   kerberos: 5
>   drs_repl: 5
>   smb2: 5
>   smb2_credits: 5
>   dsdb_audit: 5
>   dsdb_json_audit: 5
>   dsdb_password_audit: 5
>   dsdb_password_json_audit: 5
>   dsdb_transaction_audit: 5
>   dsdb_transaction_json_audit: 5
>   dsdb_group_audit: 5
>   dsdb_group_json_audit: 5
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> pm_process() returned Yes
> schema_fsmo_init: we are master[yes] updates allowed[no]
> schema_fsmo_init: we are master[yes] updates allowed[no]
> running backup on dirs: /usr/local/samba/private
> /usr/local/samba/var/locks /usr/local/samba/etc
> Starting transaction on /usr/local/samba/private/secrets
> Starting transaction on /usr/local/samba/private/sam.ldb
> schema_fsmo_init: we are master[yes] updates allowed[no]
>    backing up /usr/local/samba/private/sam.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
>    copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
> DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:43:55.250310 CEST]
> duration [355670]
> {"dsdbTransaction": {"version": {"major": 1, "minor": 0}, "action":
> "rollback", "transactionId": "6794551c-fc12-4bbf-9dfd-9f7d78b0953a",
> "duration": 355670}, "timestamp": "2019-07-04T09:43:55.250581+0200",
> "type": "dsdbTransaction"}
> schema_fsmo_init: we are master[yes] updates allowed[no]
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.416239 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: backupDate [2019-07-04T09-43-55.413999]]
> {"timestamp": "2019-07-04T09:43:55.416491+0200", "type": "dsdbChange",
> "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor":
> 0}, "operation": "Modify", "statusCode": 0, "sessionId":
> "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status":
> "Success", "performedAsSystem": false, "userSid": "S-1-5-18",
> "transactionId": "6f67143f-9add-47b8-bfa7-2d6c68a19ea9", "attributes":
> {"backupDate": {"actions": [{"action": "add", "values": [{"value":
> "2019-07-04T09-43-55.413999"}]}]}}}}
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.431208 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: sidForRestore
> [S-1-5-21-2329230797-1186182137-2997319902-1207]]
> {"timestamp": "2019-07-04T09:43:55.431477+0200", "type": "dsdbChange",
> "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor":
> 0}, "operation": "Modify", "statusCode": 0, "sessionId":
> "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status":
> "Success", "performedAsSystem": false, "userSid": "S-1-5-18",
> "transactionId": "58e89a76-1f9d-433a-b172-04f44c9f9bfd", "attributes":
> {"sidForRestore": {"actions": [{"action": "add", "values": [{"value":
> "S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}}
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:43:55.434911 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: backupType [offline]]
> {"timestamp": "2019-07-04T09:43:55.435085+0200", "type": "dsdbChange",
> "dsdbChange": {"remoteAddress": null, "version": {"major": 1, "minor":
> 0}, "operation": "Modify", "statusCode": 0, "sessionId":
> "bbfe57a0-da36-4bc8-8863-995ad1ea25c7", "dn": "@SAMBA_DSDB", "status":
> "Success", "performedAsSystem": false, "userSid": "S-1-5-18",
> "transactionId": "87f71a95-faf7-493a-8057-d38278747099", "attributes":
> {"backupType": {"actions": [{"action": "add", "values": [{"value":
> "offline"}]}]}}}}
> running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb
> Starting transaction on solo db: /usr/local/samba/private/hklm.ldb
>    running tdbbackup on the same file
> running tdbbackup on lone tdb file
> /usr/local/samba/private/netlogon_creds_cli.tdb
> tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]:
> Can use mutexes only with MUTEX_LOCKING or NOLOCK
> Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb
> Starting transaction on solo db: /usr/local/samba/private/share.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/privilege.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/idmap.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb
> tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
> already open in this process
> partition_metadata: Migrating partition metadata: open of metadata.tdb
> gave: partition_metadata: Unable to open
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or
> resource busy
> tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
> already open in this process
> module partition initialization failed : Operations error
> module show_deleted initialization failed : Operations error
> module dns_notify initialization failed : Operations error
> module extended_dn_out_ldb initialization failed : Operations error
> module linked_attributes initialization failed : Operations error
> module unique_object_sids initialization failed : Operations error
> module operational initialization failed : Operations error
> module encrypted_secrets initialization failed : Operations error
> module group_audit_log initialization failed : Operations error
> module repl_meta_data initialization failed : Operations error
> module subtree_delete initialization failed : Operations error
> module aclread initialization failed : Operations error
> module acl initialization failed : Operations error
> module descriptor initialization failed : Operations error
> module objectclass initialization failed : Operations error
> module audit_log initialization failed : Operations error
> module asq initialization failed : Operations error
> module server_sort initialization failed : Operations error
> module vlv initialization failed : Operations error
> module dsdb_paged_results initialization failed : Operations error
> module dirsync initialization failed : Operations error
> module schema_load initialization failed : Operations error
> module dsdb_notification initialization failed : Operations error
> module rootdse initialization failed : Operations error
> module samba_dsdb initialization failed : Operations error
> Unable to load modules for /usr/local/samba/private/dns/sam.ldb:
> partition_metadata: Migrating partition metadata: create of
> metadata.tdb gave: partition_metadata: Unable to create
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb: Device or
> resource busy
>
> ERROR(ldb): uncaught exception - partition_metadata: Migrating
> partition metadata: create of metadata.tdb gave: partition_metadata:
> Unable to create /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb:
> Device or resource busy
>
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 185, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py",
> line 1072, in run
>     ldb_obj = Ldb(path, lp=lp)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/__init__.py",
> line 115, in __init__
>     self.connect(url, flags, options)
>
>
>
>
> offline with samba started
> # samba-tool domain backup offline --targetdir=/local/test/
> INFO: Current debug levels:
>   all: 5
>   tdb: 5
>   printdrivers: 5
>   lanman: 5
>   smb: 5
>   rpc_parse: 5
>   rpc_srv: 5
>   rpc_cli: 5
>   passdb: 5
>   sam: 5
>   auth: 5
>   winbind: 5
>   vfs: 5
>   idmap: 5
>   quota: 5
>   acls: 5
>   locking: 5
>   msdfs: 5
>   dmapi: 5
>   registry: 5
>   scavenger: 5
>   dns: 5
>   ldb: 5
>   tevent: 5
>   auth_audit: 5
>   auth_json_audit: 5
>   kerberos: 5
>   drs_repl: 5
>   smb2: 5
>   smb2_credits: 5
>   dsdb_audit: 5
>   dsdb_json_audit: 5
>   dsdb_password_audit: 5
>   dsdb_password_json_audit: 5
>   dsdb_transaction_audit: 5
>   dsdb_transaction_json_audit: 5
>   dsdb_group_audit: 5
>   dsdb_group_json_audit: 5
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> pm_process() returned Yes
> schema_fsmo_init: we are master[yes] updates allowed[no]
> schema_fsmo_init: we are master[yes] updates allowed[no]
> running backup on dirs: /usr/local/samba/private
> /usr/local/samba/var/locks /usr/local/samba/etc
> Starting transaction on /usr/local/samba/private/secrets
> Starting transaction on /usr/local/samba/private/sam.ldb
> schema_fsmo_init: we are master[yes] updates allowed[no]
>    backing up /usr/local/samba/private/sam.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DDOMAINDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/DC%3DFORESTDNSZONES,DC%3DDOMAIN,DC%3DCAT.ldb
>    copying locked/related file /usr/local/samba/private/sam.ldb.d/metadata.tdb
>    backing up locked/related file
> /usr/local/samba/private/sam.ldb.d/CN%3DSCHEMA,CN%3DCONFIGURATION,DC%3DDOMAIN,DC%3DCAT.ldb
> DSDB Transaction [rollback] at [Thu, 04 Jul 2019 09:45:47.259639 CEST]
> duration [310424]
> {"timestamp": "2019-07-04T09:45:47.259733+0200", "type":
> "dsdbTransaction", "dsdbTransaction": {"version": {"major": 1,
> "minor": 0}, "duration": 310424, "transactionId":
> "e726216c-1c2a-46dc-9567-e4deaa95b604", "action": "rollback"}}
> schema_fsmo_init: we are master[yes] updates allowed[no]
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.421669 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: backupDate [2019-07-04T09-45-47.419553]]
> {"timestamp": "2019-07-04T09:45:47.421771+0200", "type": "dsdbChange",
> "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6",
> "version": {"major": 1, "minor": 0}, "operation": "Modify",
> "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false,
> "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null,
> "transactionId": "9c36e755-92e7-4487-956d-6dd384555e1a", "attributes":
> {"backupDate": {"actions": [{"action": "add", "values": [{"value":
> "2019-07-04T09-45-47.419553"}]}]}}}}
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.427791 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: sidForRestore
> [S-1-5-21-2329230797-1186182137-2997319902-1207]]
> {"timestamp": "2019-07-04T09:45:47.427873+0200", "type": "dsdbChange",
> "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6",
> "version": {"major": 1, "minor": 0}, "operation": "Modify",
> "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false,
> "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null,
> "transactionId": "a6d5b011-d718-458a-962e-05cc98058ee6", "attributes":
> {"sidForRestore": {"actions": [{"action": "add", "values": [{"value":
> "S-1-5-21-2329230797-1186182137-2997319902-1207"}]}]}}}}
> DSDB Change [Modify] at [Thu, 04 Jul 2019 09:45:47.431733 CEST] status
> [Success] remote host [Unknown] SID [(NULL SID)] DN [@SAMBA_DSDB]
> attributes [add: backupType [offline]]
> {"timestamp": "2019-07-04T09:45:47.431809+0200", "type": "dsdbChange",
> "dsdbChange": {"sessionId": "61a4ab3e-7b32-4d08-83ac-c77067c441b6",
> "version": {"major": 1, "minor": 0}, "operation": "Modify",
> "statusCode": 0, "dn": "@SAMBA_DSDB", "performedAsSystem": false,
> "userSid": "S-1-5-18", "status": "Success", "remoteAddress": null,
> "transactionId": "8522e328-394e-42e8-a676-a2b40cd5fcca", "attributes":
> {"backupType": {"actions": [{"action": "add", "values": [{"value":
> "offline"}]}]}}}}
> running tdbbackup on lone tdb file /usr/local/samba/private/schannel_store.tdb
> Starting transaction on solo db: /usr/local/samba/private/hklm.ldb
>    running tdbbackup on the same file
> running tdbbackup on lone tdb file
> /usr/local/samba/private/netlogon_creds_cli.tdb
> tdb_mutex_open_ok[/usr/local/samba/private/netlogon_creds_cli.tdb]:
> Can use mutexes only with MUTEX_LOCKING or NOLOCK
> Failed to open /usr/local/samba/private/netlogon_creds_cli.tdb
> Starting transaction on solo db: /usr/local/samba/private/share.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/privilege.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/idmap.ldb
>    running tdbbackup on the same file
> Starting transaction on solo db: /usr/local/samba/private/dns/sam.ldb
> tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
> already open in this process
> partition_metadata: Migrating partition metadata: open of metadata.tdb
> gave: partition_metadata: Unable to open
> /usr/local/samba/private/dns/sam.ldb.d/metadata.▒: Device or resource
> busy
> tdb(/usr/local/samba/private/dns/sam.ldb.d/metadata.tdb): tdb_open_ex:
> /usr/local/samba/private/dns/sam.ldb.d/metadata.tdb (2049,673298) is
> already open in this process
> module partition initialization failed : Operations error
> module show_deleted initialization failed : Operations error
> module dns_notify initialization failed : Operations error
> module extended_dn_out_ldb initialization failed : Operations error
> module linked_attributes initialization failed : Operations error
> module unique_object_sids initialization failed : Operations error
> module operational initialization failed : Operations error
> module encrypted_secrets initialization failed : Operations error
> module group_audit_log initialization failed : Operations error
> module repl_meta_data initialization failed : Operations error
> module subtree_delete initialization failed : Operations error
> module aclread initialization failed : Operations error
> module acl initialization failed : Operations error
> module descriptor initialization failed : Operations error
> module objectclass initialization failed : Operations error
> module audit_log initialization failed : Operations error
> module asq initialization failed : Operations error
> module server_sort initialization failed : Operations error
> module vlv initialization failed : Operations error
> module dsdb_paged_results initialization failed : Operations error
> module dirsync initialization failed : Operations error
> module schema_load initialization failed : Operations error
> module dsdb_notification initialization failed : Operations error
> module rootdse initialization failed : Operations error
> module samba_dsdb initialization failed : Operations error
> Unable to load modules for /usr/local/samba/private/dns/sam.ldb:
> partition_metadata: Migrating partition metadata: create of
> metadata.tdb gave: partition_metadata: Unable to create
> /usr/local/samba/private/dns/sam.ldb.d/metadata.▒: Device or resource
> busy
>
> ERROR(<class 'ValueError'>): uncaught exception - need more than 0
> values to unpack
>   File "/usr/local/samba/bin/samba-tool", line 44, in <module>
>     retval = cmd._run("samba-tool", subcommand, *args)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 235, in _run
>     "%s %s" % (myname, subcommand), *args)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 235, in _run
>     "%s %s" % (myname, subcommand), *args)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 235, in _run
>     "%s %s" % (myname, subcommand), *args)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 187, in _run
>     self.show_command_error(e)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 114, in show_command_error
>     (ldb_ecode, ldb_emsg) = inner_exception.args
>
>
>
> online with samba started
> samba-tool domain backup online --targetdir=/local/test/
> --server=samba4-test-UAdministrator
> ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A
> process has requested access to an object but has not been granted
> those access rights.')
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/__init__.py",
> line 185, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/netcmd/domain_backup.py",
> line 264, in run
>     backup_online(smb_conn, sysvol_tar, remote_sam.get_domain_sid())
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py",
> line 512, in backup_online
>     ntacl_sddl_str = smb_helper.get_acl(r_name, as_sddl=True)
>   File "/usr/local/samba/lib/python3.4/site-packages/samba/ntacls.py",
> line 334, in get_acl
>     smb_path, SECURITY_SECINFO_FLAGS, SECURITY_SEC_FLAGS)
> signed SMB2 message
>
>
> Any suggestion why backups are not running on 4.10.5.
>
> All commands executed with root user
>
> Thanks



More information about the samba mailing list