[Samba] Online AD Backup fails with "no auth" in 4.20?

[Luis Peromarta]

LP
On Jun 27, 2024 at 13:13 +0100, Matthias Kühne | Ellerhold Aktiengesellschaft via samba <samba at lists.samba.org>, wrote:
>
>
> After upgrading to 4.20 this results in the error message: ERROR(<class
> 'samba.join.DCJoinException'>): uncaught exception - Can't join, error:
> 00002020: Operation unavailable without authentication

This suggests bad or no Join.
What is the output of

net ads testjoin

?
>
> Even this doesnt work:
>
>   /usr/bin/samba-tool domain backup online --targetdir="/my/path"
> --server="dc1.example.org" -U Administrator
>
> Same error message on a member server. Running this on a DC prompts me
> for the password correctly. Running this on a 4.19 member server
> correctly prompts me for the password too.
>
> I even copied an smb.conf from a DC and added
> --configfile=/path/to/dc-smb.conf . Same error...
>
> Can someone point me in the right directory to make this work again on a
> 4.20 member server?
>
> Environment: Samba 4.20.2 in Debian 12 (mjts Repository).

Did this fail after updating to samba 4.20 ? Is your AD showing any other problems ?
Do you have the package samba-ad-dc installed in the DCs ? It wasn’t needed before 4.20 (or 4.20.1, not sure), but it is now.

>
> Thanks for your help and have a nice day.
>
>

You too.

MfG.