[Samba] Failed to commit objects: DOS code 0x000021bf attempting to add DC to Zentyal 3.2 domain (samba 4.1.7)

[Rich Webb]

----- On May 24, 2020, at 11:30 PM, samba samba at lists.samba.org wrote:

> On Sun, 2020-05-24 at 23:01 -0400, Rich Webb via samba wrote:
>> Hello,
>> 
>> I'm attempting to join a new samba 4 server version 4.12.3 to an
>> existing samba 4 domain running on Zentyal 3.2 (samba version
>> 4.1.7).
>> 
>> I'm getting the error in the subject line: Failed to commit objects:
>> DOS code 0x000021bf
> 
> If you turn up the log level is there more information?  (eg -d4)?
> 
> But yes, Samba 4.1.7 is before we fixed a number of issues in the
> replication protocol, and I'm not surprised you have issues.
> 
> Andrew Bartlett
> 
> --

Also I am currently using 4.10.15 as I tried to backrev to a version that would join properly. The -d4 produced a ton of output... Let me know if you need more but here is the final pieces that would likely give a clue.  I have no idea what mail-fs1 is.. that may have been an old host name possibly left hanging around in DNS?  The DC's name is fs1:

Missing parent while attempting to apply records: No parent with GUID fe34e0f7-7c0d-415d-af6e-d564e2b1cdb4 found for object remotely known as CN=mail-fs1,OU=Kerberos,DC=tca,DC=local
Failed to commit objects: WERR_DS_DRA_MISSING_PARENT
Join failed - cleaning up
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine account password for TCA from both secrets.ldb (Could not find entry to match filter: '(&(flatname=TCA)(objectclass=primaryDomain))' base: 'cn=Primary Domains': No such object: dsdb_search at ../../source4/dsdb/common/util.c:4733) and from /opt/samba/private/secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=DC1,OU=Domain Controllers,DC=tca,DC=local
Deleted CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tca,DC=local
Deleted CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tca,DC=local
ERROR(runtime): uncaught exception - (8460, "Failed to process 'chunk' of DRS replicated objects: WERR_DS_DRA_MISSING_PARENT")
  File "/opt/samba/lib64/python3.6/site-packages/samba/netcmd/__init__.py", line 185, in _run
    return self.run(*args, **kwargs)
  File "/opt/samba/lib64/python3.6/site-packages/samba/netcmd/domain.py", line 700, in run
    backend_store=backend_store)
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line 1544, in join_DC
    ctx.do_join()
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line 1438, in do_join
    ctx.join_replicate()
  File "/opt/samba/lib64/python3.6/site-packages/samba/join.py", line 982, in join_replicate
    replica_flags=ctx.domain_replica_flags)
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py", line 356, in replicate
    raise e
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py", line 343, in replicate
    self.process_chunk(level, ctr, schema, req_level, req, first_chunk)
  File "/opt/samba/lib64/python3.6/site-packages/samba/drs_utils.py", line 237, in process_chunk
    schema=schema, req_level=req_level, req=req)