[Samba] Online AD Backup fails with "no auth" in 4.20?

[Luis Peromarta]

OK apologies, looks like I jumped the gun and installed “samba-ad-dc” while my system wanted "samba-ad-provision” as per the error below.

Maybe samba-ad-dc installs samba-ad-provision ?


 /usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator
INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD
INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es
Calling bare provision
INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses
INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses
WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned
ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package
  File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run
    return self.run(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run
    ctx = join_clone(logger=logger, creds=creds, lp=lp,
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone
    ctx.do_join()
  File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join
    ctx.join_provision()
  File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision
    presult = provision(ctx.logger, system_session(), smbconf=smbconf,
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision
    schema = Schema(domainsid, invocationid=invocationid,
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__
    setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]),
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path
    raise Exception("File [%s] not found. Please install samba-ad-provision package" % path)

Would that be it ?

I recovered from a snapshot and it also works with samba-ad-provision

LP
On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote:
> On Thu, 27 Jun 2024 17:12:38 +0100
> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>
> > I can confirm that, in order to do backups from a member server, you
> > need to install samba-ad-dc in the member server running > 4.20.
> >
>
> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
> to see why it would be required for 'samba-tool domain backup online'
> to work.
>
> It contains:
>
> /etc/init.d/samba-ad-dc
> /lib/systemd/system/samba-ad-dc.service
> /usr/sbin/samba
> /usr/sbin/samba_dnsupdate
> /usr/sbin/samba_kcc
> /usr/sbin/samba_spnupdate
> /usr/sbin/samba_upgradedns
> /usr/share/doc/samba-ad-dc/changelog.Debian.gz
> /usr/share/doc/samba-ad-dc/copyright
> /usr/share/lintian/overrides/samba-ad-dc
> /usr/share/man/man8/samba.8.gz
>
> I cannot see anything there that appears to be relevant.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba