[Samba] Unable to "rejoin" existing DC after upgrade (infamous WERR_FILE_NOT_FOUND)

[Fabrizio Rompani]

----- Messaggio originale -----
Da: "Rowland Penny via samba" <samba at lists.samba.org>
A: "samba" <samba at lists.samba.org>
Cc: "Rowland Penny" <rpenny at samba.org>
Inviato: Mercoledì, 8 marzo 2023 16:05:30
Oggetto: Re: [Samba] Unable to "rejoin" existing DC after upgrade (infamous WERR_FILE_NOT_FOUND)

On 08/03/2023 14:38, Fabrizio Rompani via samba wrote:
> hi ,
> thank's for your reply .
> no , current DC doesn't have that GUID:
> 
> samba-tool spn list zimbra$
> zimbra$
> ...
> ldap/3ecb2a51-b21d-4bef-84ed-700db7963ff4._msdcs.domain.lan
> 
> 
> samba-tool spn list landc$
> landc$
> ...
> ldap/5bf8cf1f-1e35-40c6-a20d-0abc88238d92._msdcs.domain.lan
> 
> 
> that GUID is of the machine we are trying to join to:
> samba-tool spn list nextcloud$
> nextcloud$
> ...
> ldap/3fa4ff9a-7fdc-4912-ad73-08b98f6bf347._msdcs.domain.lan
> 
> is there some other we can look at?
> thank's
> 

I might be misunderstanding something here, but it sounds like you are 
trying to join a running DC to a running domain

Forget you have three 'potential' DC's for a moment, the way to join a 
new DC goes like this:

You have a fully working DC, lets call it DC1
You now want to add another DC, lets call this DC2

You go to DC2 (which it this point isn't a DC), you configure it to use 
DC1 as its name server, you remove the smb.conf and stop any running 
Samba daemons. You then run the command to join as a DC:
samba-tool domain join domain.lan DC ...................

This should then replicate most of the AD records from an existing AD DC 
to what is becoming your new DC (the rest are created when the new DC is 
started or shortly after)

Is this basically what you are doing ?


Yes, that's exactly what we 're doing. 
more precisly: 
previously we have dc2 joined as DC and all fully functioning . 
we have  demoted and  removed samba .
than upgraded from 4.14 to samba 4.17 
and finally triyng to re-join as you described : remove smb.conf , stop samba , samba-tool domain join domain.lan DC .
at this stage , on the new dc node seems everything ok: ALL GOOD 
but the remote ones are in error with WERR_FILE_NOT_FOUND.

thank's 
rf




 Or do you have a computer that is 
already running as a DC that you are trying to join to a an existing 
domain ?

Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood Avenue - Suite 200 - Raleigh, NC 27612 - USA -
Tel +39 0341 220 205 - info.it at yetopen.com  | Phone +1 919-817-8106 - info.us at yetopen.com

Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile.
Grazie.

Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible.
Thank you.