[Samba] samba-tool domain backup online fails

Tue May 5 19:04:43 UTC 2020

Hello List,

offline fails also..

root at dc01:~# samba-tool domain backup offline
--targetdir=/backup/linux/samba-dom-dc01-offline

Creating targetdir /backup/linux/samba-dom-dc01-offline...

running backup on dirs: /var/lib/samba/private /var/lib/samba /etc/samba

Starting transaction on /var/lib/samba/private/secrets

Starting transaction on /var/lib/samba/private/sam.ldb

   backing up /var/lib/samba/private/sam.ldb

   copying locked/related file /var/lib/samba/private/sam.ldb.d/metadata.tdb

   backing up locked/related file
/var/lib/samba/private/sam.ldb.d/DC=SAMBA,DC=LAURENZ,DC=WS.ldb

   backing up locked/related file
/var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=SAMBA,DC=LAURENZ,DC=WS
.ldb

   backing up locked/related file
/var/lib/samba/private/sam.ldb.d/DC=FORESTDNSZONES,DC=SAMBA,DC=LAURENZ,DC=WS
.ldb

   backing up locked/related file
/var/lib/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,DC=SAMBA,DC=LAUR
ENZ,DC=WS.ldb

   backing up locked/related file
/var/lib/samba/private/sam.ldb.d/CN=CONFIGURATION,DC=SAMBA,DC=LAURENZ,DC=WS.
ldb

Starting transaction on solo db: /var/lib/samba/private/hklm.ldb

   running tdbbackup on the same file

running tdbbackup on lone tdb file /var/lib/samba/private/schannel_store.tdb

Starting transaction on solo db: /var/lib/samba/private/privilege.ldb

   running tdbbackup on the same file

Starting transaction on solo db: /var/lib/samba/private/idmap.ldb

   running tdbbackup on the same file

running tdbbackup on lone tdb file
/var/lib/samba/private/netlogon_creds_cli.tdb

tdb_mutex_open_ok[/var/lib/samba/private/netlogon_creds_cli.tdb]: Can use
mutexes only with MUTEX_LOCKING or NOLOCK

Failed to open /var/lib/samba/private/netlogon_creds_cli.tdb

Starting transaction on solo db: /var/lib/samba/private/share.ldb

   running tdbbackup on the same file

running tdbbackup on lone tdb file /var/lib/samba/winbindd_cache.tdb

running tdbbackup on lone tdb file /var/lib/samba/account_policy.tdb

running tdbbackup on lone tdb file /var/lib/samba/registry.tdb

running tdbbackup on lone tdb file /var/lib/samba/share_info.tdb

Starting transaction on solo db: /var/lib/samba/bind-dns/dns/sam.ldb

module samba_dsdb initialization failed : Operations error

Unable to load modules for /var/lib/samba/bind-dns/dns/sam.ldb:
partition_metadata: Migrating partition metadata: create of metadata.tdb
gave: partition_metadata: Unable to create
/var/lib/samba/bind-dns/dns/sam.ldb.d/metadata.tdb: Device or resource busy

ERROR(ldb): uncaught exception - partition_metadata: Migrating partition
metadata: create of metadata.tdb gave: partition_metadata: Unable to create
/var/lib/samba/bind-dns/dns/sam.ldb.d/metadata.tdb: Device or resource busy

  File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 186,
in _run

    return self.run(*args, **kwargs)

  File "/usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py", line
1072, in run

    ldb_obj = Ldb(path, lp=lp)

  File "/usr/lib/python3/dist-packages/samba/__init__.py", line 115, in
__init__

    self.connect(url, flags, options)

Von: Dirk Laurenz <samba at laurenz.ws> 
Gesendet: Dienstag, 5. Mai 2020 20:54
An: 'samba at lists.samba.org' <samba at lists.samba.org>
Betreff: samba-tool domain backup online fails

Hello List,

now i try to use the backup command for the first time and it fails:

It claims sam.ldb.d is not empty but there should be all domain db's right?

Samba Version:

root at dc01:/var/lib/samba/private/sam.ldb.d#
<mailto:root at dc01:/var/lib/samba/private/sam.ldb.d>  samba -V

Version 4.11.8-Debian

root at dc01:/backup/linux/samba-dom# samba-tool domain backup online
--server=dc01 -Uadministrator --targetdir=/backup/linux/samba-dom

Password for [SAMBA\administrator]:

INFO 2020-05-05 20:46:57,256 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1574: workgroup is SAMBA

INFO 2020-05-05 20:46:57,256 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1577: realm is
samba.laurenz.ws

Calling bare provision

INFO 2020-05-05 20:46:57,320 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2128: Looking up
IPv4 addresses

INFO 2020-05-05 20:46:57,325 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2145: Looking up
IPv6 addresses

WARNING 2020-05-05 20:46:57,329 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2152: No IPv6
address will be assigned

INFO 2020-05-05 20:46:59,313 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2319: Setting up
share.ldb

INFO 2020-05-05 20:47:00,336 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2323: Setting up
secrets.ldb

INFO 2020-05-05 20:47:01,543 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2329: Setting up
the registry

INFO 2020-05-05 20:47:09,999 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2332: Setting up
the privileges database

INFO 2020-05-05 20:47:11,616 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2335: Setting up
idmap db

INFO 2020-05-05 20:47:12,893 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2342: Setting up
SAM db

INFO 2020-05-05 20:47:13,195 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #898: Setting up
sam.ldb partitions and settings

INFO 2020-05-05 20:47:13,222 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #910: Setting up
sam.ldb rootDSE

INFO 2020-05-05 20:47:13,288 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #1339:
Pre-loading the Samba 4 and AD schema

Unable to determine the DomainSID, can not enforce uniqueness constraint on
local domainSIDs

INFO 2020-05-05 20:47:15,244 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2395: A Kerberos
configuration suitable for Samba AD has been generated at
/backup/linux/samba-dom/tmpgjtut0q2/private/krb5.conf

INFO 2020-05-05 20:47:15,245 pid:25729
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2396: Merge the
contents of this file with your system krb5.conf or replace it with this
one. Do not create a symlink!

Provision OK for domain DN DC=samba,DC=laurenz,DC=ws

Starting replication

Using DS_BIND_GUID_W2K3

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[402/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[804/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[1206/1550] linked_values[0/0]

Schema-DN[CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws]
objects[1550/1550] linked_values[0/0]

Analyze and apply schema objects

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[402/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[804/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1206/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1608/1625]
linked_values[0/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[1625/1625]
linked_values[39/39]

Failed to commit objects: DOS code 0x000021bf

Missing target object - retrying with DRS_GET_TGT

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2027/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2429/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[2831/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[3233/1625]
linked_values[40/1]

Partition[CN=Configuration,DC=samba,DC=laurenz,DC=ws] objects[3250/1625]
linked_values[78/39]

Replicating critical objects from the base DN of the domain

Partition[DC=samba,DC=laurenz,DC=ws] objects[99/99] linked_values[28/28]

Partition[DC=samba,DC=laurenz,DC=ws] objects[321/321] linked_values[28/28]

../../ldb_key_value/ldb_kv_index.c:2882: duplicate attribute value in
CN=W7TEST,CN=Computers,DC=samba,DC=laurenz,DC=ws for index on
servicePrincipalName, duplicate of objectGUID
9798a295-7322-44e9-a65a-f756f7f484fe in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/W7TEST.SAMBA.LAURENZ.WS

../../ldb_key_value/ldb_kv_index.c:2882: duplicate attribute value in
CN=W10TEST,CN=Computers,DC=samba,DC=laurenz,DC=ws for index on
servicePrincipalName, duplicate of objectGUID
d7bdeb3d-be13-480d-b855-aef5721554e0 in
@INDEX:SERVICEPRINCIPALNAME:TERMSRV/W10TEST.SAMBA.LAURENZ.WS

Done with always replicated NC (base, config, schema)

Replicating DC=DomainDnsZones,DC=samba,DC=laurenz,DC=ws

Partition[DC=DomainDnsZones,DC=samba,DC=laurenz,DC=ws] objects[113/113]
linked_values[0/0]

Replicating DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws

Partition[DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws] objects[26/26]
linked_values[0/0]

Committing SAM database

Repacking database from v1 to v2 format (first record
CN=ms-DFSR-Options2,CN=Schema,CN=Configuration,DC=samba,DC=laurenz,DC=ws)

Repack: re-packed 10000 records so far

Repacking database from v1 to v2 format (first record
CN=IntellimirrorSCP-Display,CN=411,CN=DisplaySpecifiers,CN=Configuration,DC=
samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC
=samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
DC=_ldap._tcp.Default-First-Site-Name._sites.gc,DC=_msdcs.samba.laurenz.ws,C
N=MicrosoftDNS,DC=ForestDnsZones,DC=samba,DC=laurenz,DC=ws)

Repacking database from v1 to v2 format (first record
CN=samba,CN=rpc,CN=ypServ30,CN=RpcServices,CN=System,DC=samba,DC=laurenz,DC=
ws)

INFO 2020-05-05 20:48:12,830 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1671: Setting isSynchronized
and dsServiceName

INFO 2020-05-05 20:48:13,362 pid:25729
/usr/lib/python3/dist-packages/samba/join.py #1580: Cloned domain SAMBA (SID
S-1-5-21-4127083392-2923695558-1708149541)

INFO 2020-05-05 20:49:58,096 pid:25729
/usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py #124: Creating
backup file
/backup/linux/samba-dom/samba-backup-samba.laurenz.ws-2020-05-05T20-49-55.35
1765.tar.bz2...

ERROR(<class 'OSError'>): uncaught exception - [Errno 39] Directory not
empty: 'sam.ldb.d'

  File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 186,
in _run

    return self.run(*args, **kwargs)

  File "/usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py", line
286, in run

    shutil.rmtree(tmpdir)

  File "/usr/lib/python3.7/shutil.py", line 491, in rmtree

    _rmtree_safe_fd(fd, path, onerror)

  File "/usr/lib/python3.7/shutil.py", line 429, in _rmtree_safe_fd

    _rmtree_safe_fd(dirfd, fullname, onerror)

  File "/usr/lib/python3.7/shutil.py", line 433, in _rmtree_safe_fd

    onerror(os.rmdir, fullname, sys.exc_info())

  File "/usr/lib/python3.7/shutil.py", line 431, in _rmtree_safe_fd

    os.rmdir(entry.name, dir_fd=topfd)