[Samba] problem with role transfer

[Giuseppe Arvati]

Il 23/03/2021 10:06, Rowland penny via samba ha scritto:
> On 23/03/2021 07:34, Giuseppe Arvati via samba wrote:
>> Hello,
>>
>> samba 4.8.8
>>
>> yesterday I tried to transfer fsmo roles from APAMFS2 to DC1PIOP but
>>
>> during transfer of forestdns and domaindns I had errors
>>
>> ERROR(<type 'exceptions.AttributeError'>): uncaught exception - 
>> 'module' object has no attribute 'drs_utils'
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", 
>> line 176, in _run
>>     return self.run(*args, **kwargs)
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/fsmo.py", 
>> line 520, in run
>>     transfer_dns_role(self.outf, sambaopts, credopts, role, samdb)
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/fsmo.py", 
>> line 129, in transfer_dns_role
>>     except samba.drs_utils.drsException, e:
>> You have new mail in /var/spool/mail/root
>> [root at dc1piopp script]# samba-tool fsmo transfer --role=domaindns -U 
>> Administrator
>> Password for [APAM-AD\Administrator]:
>> ERROR(<type 'exceptions.AttributeError'>): uncaught exception - 
>> 'module' object has no attribute 'drs_utils'
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", 
>> line 176, in _run
>>     return self.run(*args, **kwargs)
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/fsmo.py", 
>> line 520, in run
>>     transfer_dns_role(self.outf, sambaopts, credopts, role, samdb)
>>   File 
>> "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/fsmo.py", 
>> line 129, in transfer_dns_role
>>     except samba.drs_utils.drsException, e:
>>
>> but the roles seems to be transferred
>>
>> [root at dc1piopp netcmd]# samba-tool fsmo show
>> SchemaMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> InfrastructureMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> RidAllocationMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> PdcEmulationMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> DomainNamingMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> DomainDnsZonesMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>> ForestDnsZonesMasterRole owner: CN=NTDS 
>> Settings,CN=DC1PIOPP,CN=Servers,CN=apamsede,CN=Sites,CN=Configuration,DC=apam-ad,DC=apam,DC=it
>>
>> Today I read emails related to the same problem "[Samba] forestdns 
>> fsmo role transfer fails - module 'samba' has no attribute 'drs_utils'"
>>
>> where the problem was a missing import lib in fsmo.py. I added the 
>> lib and rerun the command but it says
>>
>> "This DC already has the 'forestdns' FSMO role"
>>
>> Can I test for possible problems due to errors durind transfer ?
>>
>> Which kind on commands can I use to verify if all is ok ?
>>
>>
>> Thnak you
>>
>> Giuseppe
>>
>>
>>
>>
>>
>
> If 'samba-tool fsmo show' displays the FSMO roles on the DC(s) you 
> expect, then ignore it. You should however upgrade your version of 
> Samba, you have run into a bug that was fixed in a later version.
>
> Rowland
>
>
>
I found some errors in log.samba

[2021/03/22 19:15:36.911313,  0] 
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
   /usr/local/samba/sbin/samba_dnsupdate: update failed: NOTAUTH
[2021/03/22 19:15:36.952540,  0] 
../source4/dsdb/dns/dns_update.c:330(dnsupdate_nameupdate_done)
   ../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error 
code 1
[2021/03/22 19:25:36.681982,  0] 
../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
   /usr/local/samba/sbin/samba_dnsupdate: update failed: NOTAUTH
[2021/03/22 19:25:36.721892,  0] 
../source4/dsdb/dns/dns_update.c:330(dnsupdate_nameupdate_done)
   ../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error 
code 1