[Samba] Join Samba to a Windows AD 'WERR_DS_NO_CROSSREF_FOR_NC'

René Schmidt rene at schmidthome-sh.de
Sun Jul 21 18:53:47 UTC 2019


Hello Rowland,

Thank you very much for your support so far.

Now I could join.

But:
Now I have a problem with the DNS. I use the samba internal DNS.

When I try to reach mydom.local or SAD.mydom.local, I only get the error:
  nslookup SAD.mydom.local
Server: 192.168.159.98
Address: 192.168.159.98 # 53

Non-authoritative answer:
*** Can not find SAD.mydom.local: No answer
--------------------------------------
nslookup mydom.local
Server: 192.168.159.98
Address: 192.168.159.98 # 53

Non-authoritative answer:
*** Can not find mydom.local: No answer

a nslookup on google.de works. (I added the following entry to smb.conf: dns forwarder = 8.8.8.8)

Also, I can not address the Samba server with the Windows DNS Tools: The Active Directory is not available.

in the jornalctl I have the following messages:
Jul 21 20:47:54 SAD samba[1328]: [2019/07/21 20:47:54.453639,  0] ../source4/rpc_server/dnsserver/dnsdb.c:112(dnsserver_db_enumerate_zones)
Jul 21 20:47:54 SAD samba[1328]: dnsserver: Failed to find DNS Zones in CN=MicrosoftDNS,DC=ForestDnsZones,DC=mydom,DC=local
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.462358,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.465301,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.466339,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     return self.run(*args, **kwargs)
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.466904,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 940, in run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.467333,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     raise e
Jul 21 20:47:54 SAD samba[1328]: [2019/07/21 20:47:54.507343,  0] ../source4/rpc_server/dnsserver/dnsdb.c:112(dnsserver_db_enumerate_zones)
Jul 21 20:47:54 SAD samba[1328]: dnsserver: Failed to find DNS Zones in CN=MicrosoftDNS,DC=ForestDnsZones,DC=mydom,DC=local
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.510181,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.511217,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.512146,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     return self.run(*args, **kwargs)
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.513033,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 940, in run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.514036,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     raise e
Jul 21 20:47:54 SAD samba[1328]: [2019/07/21 20:47:54.552053,  0] ../source4/rpc_server/dnsserver/dnsdb.c:112(dnsserver_db_enumerate_zones)
Jul 21 20:47:54 SAD samba[1328]: dnsserver: Failed to find DNS Zones in CN=MicrosoftDNS,DC=ForestDnsZones,DC=mydom,DC=local
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.554169,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.555017,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.555884,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     return self.run(*args, **kwargs)
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.556742,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 940, in run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.557541,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     raise e
Jul 21 20:47:54 SAD samba[1328]: [2019/07/21 20:47:54.590717,  0] ../source4/rpc_server/dnsserver/dnsdb.c:112(dnsserver_db_enumerate_zones)
Jul 21 20:47:54 SAD samba[1328]: dnsserver: Failed to find DNS Zones in CN=MicrosoftDNS,DC=ForestDnsZones,DC=mydom,DC=local
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.594188,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.595188,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.596029,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:     return self.run(*args, **kwargs)
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.596741,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Jul 21 20:47:54 SAD samba[1345]: /usr/sbin/samba_dnsupdate:   File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 940, in run
Jul 21 20:47:54 SAD samba[1345]: [2019/07/21 20:47:54.597532,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)

Do you have an idea for this?
Currently Samba 4.7.6 is still installed.

René

-----Ursprüngliche Nachricht-----
Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland penny via samba
Gesendet: Sonntag, 21. Juli 2019 11:41
An: sambalist <samba at lists.samba.org>
Betreff: Re: [Samba] Join Samba to a Windows AD 'WERR_DS_NO_CROSSREF_FOR_NC'

On 21/07/2019 10:22, René Schmidt wrote:
> Hello Rowland,
>
> I have started again:
> - new Window Server 2012 R2 installed
> - DNS server set up
> - once again the Ubunut 18.04 freshly installed
> - entered the IP of the Windows server as DNS server
> - Installed the Samba Packet from the official Ubunut source:
> dpkg -l | grep samba
> ii  python-samba                          	2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        Python bindings for Samba
> ii  samba                                 	2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        SMB/CIFS file, print, and login server for Unix
> ii  samba-common                          2:4.7.6+dfsg~ubuntu-0ubuntu2.11   all          common files used by both the Samba server and client
> ii  samba-common-bin                  2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        Samba common files used by both the server and the client
> ii  samba-dsdb-modules	2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        Samba Directory Services Database
> ii  samba-libs:amd64		2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        Samba core libraries
> ii  samba-vfs-modules		2:4.7.6+dfsg~ubuntu-0ubuntu2.11   amd64        Samba Virtual FileSystem plugins
>
>
> if I am now
> samba-tool domain join mydom.local DC -U "MYDOM\administrator" -d3 I 
> get the following message:
> Adding 1 remote DNS records for SAD. mydom.local Using binding 
> ncacn_ip_tcp: WAD. mydom.local [, sign]
> resolve_lmhosts: Attempting lmhosts lookup for name WAD. mydom.local 
> <0x20>
> resolve_lmhosts: Attempting lmhosts lookup for name WAD. mydom.local 
> <0x20> Adding DNS A record WAD.schmidthome.local for IPv4 IP: 
> 192.168.159.98 Join failed - cleaning up
Anything after this point is an artefact of the failure and can be ignored.
> Do you have an idea?
> The DNS entry is created on the Windows server for the Samba server.

You are getting closer, the join is now failing at the last hurdle and we had this very recently with a user trying to join to Windows 2003 DC.

The cure was to stop the join creating the DC records.

Find 'join.py (/usr/lib/python2.7/dist-packages/samba/join.py on my DC) and open it in your favourite editor, find these lines:

             if ctx.dns_backend != "NONE":
                 ctx.join_add_dns_records()
                 ctx.join_replicate_new_dns_records()

Line 1405 in my version, under '    def do_join(ctx):'

just comment out those three lines, save & close, then try the join again.

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




More information about the samba mailing list