[Samba] samba-tool domain backup offline fails

[Matthias Kühne | Ellerhold AG]

Hello,

I *think* thats why you should add -N to the command, am I right?

I'd be very interested to see your script Rowland.

I've managed to get our online backup working via plain-text PW thats 
saved in a file only accessible as root on a DC. Not great but not bad 
either.

This way I dont have to handle and kerberos re-negotiation, right? Ive 
looked at the code of adman for it and scared me to hell!

Thanks and bye!

Am 07.04.21 um 11:01 schrieb L.P.H. van Belle via samba:
> Hai,
>
> it this also know, i you already have authenticated with kerberos, you need to re-enter the smb password.
>
> kinit Administrator
> samba-tool domain backup online --server=dc1.$(hostname -d) \
>   --targetdir=/root/samba-backup -k yes
>
> That runs but ... Also has a small error. :-(  ... this..
> This comes later on..
>
> Backing up sysvol files (via SMB)...
> Password for [Administrator at REALM_HERE]:
>
> since i authenticatied with kerberos already, i would not have expected an password question here. :-/
>
>
>
> Greetz,
>
> Louis
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny via
>> samba
>> Verzonden: woensdag 7 april 2021 10:53
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] samba-tool domain backup offline fails
>>
>> On 07/04/2021 09:22, Stefan Bellon via samba wrote:
>>> Hi all,
>>>
>>> I'm about to set up disaster recovery for the domain and followed
>>> https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC
>>> (as I am using Samba 4.13.5).
>>>
>>> First I went for the online backup (which works), but AFAICS it requires
>>> administrator authentication and is thus not really suited for
>>> automated backups via a cronjob.
>>>
>>> When I tried "samba-tool domain backup offline" however, this fails:
>>
>> You have hit a known bug, which has just been fixed, so it should be in
>> the next releases of 4.13 and 4.14.
>>
>> You can use the online backup from cron, just create a script (If you
>> cannot, talk nicely and I will give you a copy of mine) , basically it
>> boils down to using kerberos and adding '-N' to the command.
>>
>> Rowland
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>
>
-- 
Matthias Kühne
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Telefax: +49 (0) 351 83933-99

Web     www.ellerhold.de
Twitter www.twitter.com/Ellerhold_AG
Youtube www.youtube.com/user/ellerholdgruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold




 
----------------
Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/