[Samba] samba-tool domain backup online fails

Tue May 5 18:53:54 UTC 2020

Hello List,

now i try to use the backup command for the first time and it fails:

It claims sam.ldb.d is not empty but there should be all domain db's right?

Samba Version:

root at dc01:/var/lib/samba/private/sam.ldb.d#
<mailto:root at dc01:/var/lib/samba/private/sam.ldb.d#>  samba -V

Version 4.11.8-Debian

root at dc01:/backup/linux/samba-dom# samba-tool domain backup online
--server=dc01 -Uadministrator --targetdir=/backup/linux/samba-dom

Password for [SAMBA\administrator]:

INFO 2020-05-05 20:46:57,256 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1574: workgroup is SAMBA

INFO 2020-05-05 20:46:57,256 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1577: realm is
samba.laurenz.ws

Calling bare provision

INFO 2020-05-05 20:46:57,320 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2128: Looking up
IPv4 addresses

INFO 2020-05-05 20:46:57,325 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2145: Looking up
IPv6 addresses

WARNING 2020-05-05 20:46:57,329 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2152: No IPv6
address will be assigned

INFO 2020-05-05 20:46:59,313 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2319: Setting up
share.ldb

INFO 2020-05-05 20:47:00,336 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2323: Setting up
secrets.ldb

INFO 2020-05-05 20:47:01,543 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2329: Setting up
the registry

INFO 2020-05-05 20:47:09,999 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2332: Setting up
the privileges database

INFO 2020-05-05 20:47:11,616 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2335: Setting up
idmap db

INFO 2020-05-05 20:47:12,893 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2342: Setting up
SAM db

INFO 2020-05-05 20:47:13,195 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #898: Setting up
sam.ldb partitions and settings

INFO 2020-05-05 20:47:13,222 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #910: Setting up
sam.ldb rootDSE

INFO 2020-05-05 20:47:13,288 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #1339:
Pre-loading the Samba 4 and AD schema

Unable to determine the DomainSID, can not enforce uniqueness constraint on
local domainSIDs

INFO 2020-05-05 20:47:15,244 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2395: A Kerberos
configuration suitable for Samba AD has been generated at
/backup/linux/samba-dom/tmpgjtut0q2/private/krb5.conf

INFO 2020-05-05 20:47:15,245 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2396: Merge the
contents of this file with your system krb5.conf or replace it with this
one. Do not create a symlink!

Provision OK for domain DN DC=samba,DC=laurenz,DC=ws

Starting replication

Using DS_BIND_GUID_W2K3

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[402/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[804/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[1206/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[1550/1550] linked_values[0/0]

Analyze and apply schema objects

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[402/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[804/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1206/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1608/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1625/1625]
linked_values[39/39]

Failed to commit objects: DOS code 0x000021bf

Missing target object - retrying with DRS_GET_TGT

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2027/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2429/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2831/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[3233/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[3250/1625]
linked_values[78/39]

Replicating critical objects from the base DN of the domain

Partition[DC=samba,DC=laurenz,DC=ws] objects[99/99] linked_values[28/28]

Partition[DC=samba,DC=laurenz,DC=ws] objects[321/321] linked_values[28/28]

../../ldb_key_value/ldb_kv_index.c:2882: duplicate attribute value in
CN=W7TEST,CN=Computers,DC=samba,DC=laurenz,DC=ws for index on
servicePrincipalName, duplicate of objectGUID
9798a295-7322-44e9-a65a-f756f7f484fe in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/W7TEST.SAMBA.LAURENZ.WS

../../ldb_key_value/ldb_kv_index.c:2882: duplicate attribute value in
CN=W10TEST,CN=Computers,DC=samba,DC=laurenz,DC=ws for index on
servicePrincipalName, duplicate of objectGUID
d7bdeb3d-be13-480d-b855-aef5721554e0 in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/W10TEST.SAMBA.LAURENZ.WS

Done with always replicated NC (base, config, schema)

Replicating DC=DomainDnsZones,DC=samba,DC=laurenz,DC=ws

Partition[DC=DomainDnsZones,DC=samba,DC=laurenz,DC=ws] objects[113/113]
linked_values[0/0]

Replicating DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws

Partition[DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws] objects[26/26]
linked_values[0/0]

Committing SAM database

Repacking database from v1 to v2 format (first record
CN=ms-DFSR-Options2,CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws)

Repack: re-packed 10000 records so far

Repacking database from v1 to v2 format (first record
CN=IntellimirrorSCP-Display,CN=411,CN=DisplaySpecifiers,CN=Configuration,DC=
samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC
=samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.samba.laurenz.ws,C
N=MicrosoftDNS,DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
CN=samba,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=samba,DC=laurenz,DC=
ws)

INFO 2020-05-05 20:48:12,830 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1671: Setting isSynchronized
and dsServiceName

INFO 2020-05-05 20:48:13,362 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1580: Cloned domain SAMBA (SID
S-1-5-21-4127083392-2923695558-1708149541)

INFO 2020-05-05 20:49:58,096 pid:25729
/usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py #124: Creating
backup file
/backup/linux/samba-dom/samba-backup-samba.laurenz.ws-2020-05-05T20-49-55.35
1765.tar.bz2...

ERROR(<class 'OSError'>): uncaught exception - [Errno 39] Directory not
empty: 'sam.ldb.d'

  File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 186,
in _run

    return self.run(*args, **kwargs)

  File "/usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py", line
286, in run

    shutil.rmtree(tmpdir)

  File "/usr/lib/python3.7/shutil.py", line 491, in rmtree

    _rmtree_safe_fd(fd, path, onerror)

  File "/usr/lib/python3.7/shutil.py", line 429, in _rmtree_safe_fd

    _rmtree_safe_fd(dirfd, fullname, onerror)

  File "/usr/lib/python3.7/shutil.py", line 433, in _rmtree_safe_fd

    onerror(os.rmdir, fullname, sys.exc_info())

  File "/usr/lib/python3.7/shutil.py", line 431, in _rmtree_safe_fd

    os.rmdir(entry.name, dir_fd=topfd)