[Samba] Online AD Backup fails with "no auth" in 4.20?

Fri Jun 28 05:22:55 UTC 2024

Hey Luis & Rowland,

this put me on the right track. Ive never had this error (please install 
samba-ad-provision).

First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12 
to 2:4.20.2+dfsg-4~mjt-deb12). No change.

Then Ive installed samba-ad-provision. No change.

Then I installed samba-dsdb-modules. Now it works!!

Then I uninstalled samba-ad-provision. Now Im getting your error message 
("Please install samba-ad-provision").

So from 4.20.2 onwards you need samba-ad-provision AND 
samba-dsdb-modules on a Debian 12 member server.

4.20.1 did not have the split I think so thats why Rowlands backup works 
atm.

Thanks for your help!!

Am 27.06.24 um 18:43 schrieb Luis Peromarta via samba:
> OK apologies, looks like I jumped the gun and installed “samba-ad-dc” while my system wanted "samba-ad-provision” as per the error below.
>
> Maybe samba-ad-dc installs samba-ad-provision ?
>
>
>   /usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator
> INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD
> INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es
> Calling bare provision
> INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses
> INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses
> WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned
> ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package
>    File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run
>      return self.run(*args, **kwargs)
>             ^^^^^^^^^^^^^^^^^^^^^^^^^
>    File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run
>      ctx = join_clone(logger=logger, creds=creds, lp=lp,
>            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>    File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone
>      ctx.do_join()
>    File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join
>      ctx.join_provision()
>    File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision
>      presult = provision(ctx.logger, system_session(), smbconf=smbconf,
>                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>    File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision
>      schema = Schema(domainsid, invocationid=invocationid,
>               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>    File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__
>      setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]),
>      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>    File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path
>      raise Exception("File [%s] not found. Please install samba-ad-provision package" % path)
>
> Would that be it ?
>
> I recovered from a snapshot and it also works with samba-ad-provision
>
> LP
> On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote:
>> On Thu, 27 Jun 2024 17:12:38 +0100
>> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>>
>>> I can confirm that, in order to do backups from a member server, you
>>> need to install samba-ad-dc in the member server running > 4.20.
>>>
>> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
>> to see why it would be required for 'samba-tool domain backup online'
>> to work.
>>
>> It contains:
>>
>> /etc/init.d/samba-ad-dc
>> /lib/systemd/system/samba-ad-dc.service
>> /usr/sbin/samba
>> /usr/sbin/samba_dnsupdate
>> /usr/sbin/samba_kcc
>> /usr/sbin/samba_spnupdate
>> /usr/sbin/samba_upgradedns
>> /usr/share/doc/samba-ad-dc/changelog.Debian.gz
>> /usr/share/doc/samba-ad-dc/copyright
>> /usr/share/lintian/overrides/samba-ad-dc
>> /usr/share/man/man8/samba.8.gz
>>
>> I cannot see anything there that appears to be relevant.
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba

-- 
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
LinkedIn: www.linkedin.com/company/ellerhold-gruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold

---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/