[Samba] WERR_INTERNAL_ERROR on samba-tool domain join

[Andrew Bartlett]

On Thu, 2023-02-23 at 13:40 -0500, Stephen Vose via samba wrote:
> I have a running AD-DC I just built, version 4.16.8 on a fresh Rocky
> Linux 8.7 install, that seems to be working fine, I even got
> smartcard login working using the walkthrough on the wiki. When I try
> to add a second DC installed the same way, it fails in the following
> way:
> ERROR(runtime): uncaught exception - (1359, 'WERR_INTERNAL_ERROR')  
> File "/usr/local/samba/lib64/python3.6/site-
> packages/samba/netcmd/__init__.py", line 186, in _run     return
> self.run(*args, **kwargs)   File
> "/usr/local/samba/lib64/python3.6/site-
> packages/samba/netcmd/domain.py", line 709, in run    
> backend_store_size=backend_store_size)   File
> "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 1579, in join_DC     ctx.do_join()   File
> "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 1469, in do_join     ctx.join_replicate()   File
> "/usr/local/samba/lib64/python3.6/site-packages/samba/join.py", line
> 981, in join_replicate     replica_flags=ctx.domain_replica_flags |
> drsuapi.DRSUAPI_DRS_CRITICAL_ONLY)   File
> "/usr/local/samba/lib64/python3.6/site-packages/samba/drs_utils.py",
> line 361, in replicate     (level, ctr) =
> self.drs.DsGetNCChanges(self.drs_handle, req_level, req)
> Not really sure where I should go from here... the working DC doesn't
> have any live data besides a single user I created to test the
> smartcard login, so I won't be too upset if I have to take it down.

Turn up the log level on the server and work out why it is failing from
that end.
Andrew Bartlett


-- Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group
company

Samba Development and Support: https://catalyst.net.nz/services/samba

Catalyst IT - Expert Open Source Solutions