[Samba] samba-tool domain backup offline fails

[Elias Pereira]

Hello Louis,

I upgraded my DC to samba 4.14.3 and the offline backup errors still occur?

Anything to do?


On Thu, Apr 15, 2021 at 10:56 AM Elias Pereira <empbilly at gmail.com> wrote:

> Ok, Louis!!! Thanks for the answer!!!
>
> On Thu, Apr 15, 2021 at 10:43 AM L.P.H. van Belle <belle at bazuin.nl> wrote:
>
>> No, I believe next week or max 2 weeks for new release samba.
>> and if its not in, i’ll have a look of i use the patch.
>>
>> Greetz,
>>
>> Louis
>>
>>
>> ------------------------------
>>
>> *Van:* Elias Pereira [mailto:empbilly at gmail.com]
>> *Verzonden:* donderdag 15 april 2021 15:38
>> *Aan:* samba
>> *CC:* L.P.H. van Belle
>> *Onderwerp:* Re: [Samba] samba-tool domain backup offline fails
>>
>>
>>
>> Hi,
>>
>>
>>
>> @L.P.H. van Belle <belle at bazuin.nl>
>>
>> Does version 4.14 of your repository already have this patch?
>>
>>
>>
>> On Wed, Apr 14, 2021 at 4:36 PM Stefan Kania via samba <
>> samba at lists.samba.org> wrote:
>>
>> Hi,
>>
>> I don't know the script from Rowland, but there is an easy way to create
>> the TGT. The magic is k5start, the name of the Debian-package is kstart.
>> Yo can use it to create the ticket with a deamon. I use it together with
>> openldap to set up replication with kerberos. Read here for more infos:
>> https://www.eyrie.org/~eagle/software/kstart/
>>
>>
>>
>> Am 07.04.21 um 11:08 schrieb Matthias Kühne | Ellerhold AG via samba:
>> > Hello,
>> >
>> > I *think* thats why you should add -N to the command, am I right?
>> >
>> > I'd be very interested to see your script Rowland.
>> >
>> > I've managed to get our online backup working via plain-text PW thats
>> > saved in a file only accessible as root on a DC. Not great but not bad
>> > either.
>> >
>> > This way I dont have to handle and kerberos re-negotiation, right? Ive
>> > looked at the code of adman for it and scared me to hell!
>> >
>> > Thanks and bye!
>> >
>> > Am 07.04.21 um 11:01 schrieb L.P.H. van Belle via samba:
>> >> Hai,
>> >>
>> >> it this also know, i you already have authenticated with kerberos, you
>> need to re-enter the smb password.
>> >>
>> >> kinit Administrator
>> >> samba-tool domain backup online --server=dc1.$(hostname -d) \
>> >>   --targetdir=/root/samba-backup -k yes
>> >>
>> >> That runs but ... Also has a small error. :-(  ... this..
>> >> This comes later on..
>> >>
>> >> Backing up sysvol files (via SMB)...
>> >> Password for [Administrator at REALM_HERE]:
>> >>
>> >> since i authenticatied with kerberos already, i would not have
>> expected an password question here. :-/
>> >>
>> >>
>> >>
>> >> Greetz,
>> >>
>> >> Louis
>> >>
>> >>> -----Oorspronkelijk bericht-----
>> >>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland
>> penny via
>> >>> samba
>> >>> Verzonden: woensdag 7 april 2021 10:53
>> >>> Aan: samba at lists.samba.org
>> >>> Onderwerp: Re: [Samba] samba-tool domain backup offline fails
>> >>>
>> >>> On 07/04/2021 09:22, Stefan Bellon via samba wrote:
>> >>>> Hi all,
>> >>>>
>> >>>> I'm about to set up disaster recovery for the domain and followed
>> >>>> https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC
>> >>>> (as I am using Samba 4.13.5).
>> >>>>
>> >>>> First I went for the online backup (which works), but AFAICS it
>> requires
>> >>>> administrator authentication and is thus not really suited for
>> >>>> automated backups via a cronjob.
>> >>>>
>> >>>> When I tried "samba-tool domain backup offline" however, this fails:
>> >>>
>> >>> You have hit a known bug, which has just been fixed, so it should be
>> in
>> >>> the next releases of 4.13 and 4.14.
>> >>>
>> >>> You can use the online backup from cron, just create a script (If you
>> >>> cannot, talk nicely and I will give you a copy of mine) , basically it
>> >>> boils down to using kerberos and adding '-N' to the command.
>> >>>
>> >>> Rowland
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>> To unsubscribe from this list go to the following URL and read the
>> >>> instructions:  https://lists.samba.org/mailman/options/samba
>> >>
>> >>
>>
>> --
>> Stefan Kania
>> Landweg 13
>> 25693 St. Michaelisdonn
>>
>>
>> Signieren jeder E-Mail hilft Spam zu reduzieren und schützt Ihre
>> Privatsphäre. Ein kostenfreies Zertifikat erhalten Sie unter
>> https://www.dgn.de/dgncert/index.html
>>
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>>
>>
>> --
>>
>> Elias Pereira
>>
>
>
> --
> Elias Pereira
>


-- 
Elias Pereira