[Samba] Online AD Backup fails with "no auth" in 4.20?
Matthias Kühne | Ellerhold Aktiengesellschaft
matthias.kuehne at ellerhold.de
Fri Jun 28 05:22:55 UTC 2024
Hey Luis & Rowland,
this put me on the right track. Ive never had this error (please install
samba-ad-provision).
First I upgraded to the newest samba version (2:4.20.2+dfsg-2~mjt-deb12
to 2:4.20.2+dfsg-4~mjt-deb12). No change.
Then Ive installed samba-ad-provision. No change.
Then I installed samba-dsdb-modules. Now it works!!
Then I uninstalled samba-ad-provision. Now Im getting your error message
("Please install samba-ad-provision").
So from 4.20.2 onwards you need samba-ad-provision AND
samba-dsdb-modules on a Debian 12 member server.
4.20.1 did not have the split I think so thats why Rowlands backup works
atm.
Thanks for your help!!
Am 27.06.24 um 18:43 schrieb Luis Peromarta via samba:
> OK apologies, looks like I jumped the gun and installed “samba-ad-dc” while my system wanted "samba-ad-provision” as per the error below.
>
> Maybe samba-ad-dc installs samba-ad-provision ?
>
>
> /usr/bin/samba-tool domain backup online --targetdir=/root/samba-ad-backup-awing/ --server=awing -UAdministrator
> INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1637: workgroup is MAD
> INFO 2024-06-27 18:35:35,593 pid:2650 /usr/lib/python3/dist-packages/samba/join.py #1640: realm is mad.caponato.es
> Calling bare provision
> INFO 2024-06-27 18:35:35,606 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2110: Looking up IPv4 addresses
> INFO 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2127: Looking up IPv6 addresses
> WARNING 2024-06-27 18:35:35,607 pid:2650 /usr/lib/python3/dist-packages/samba/provision/__init__.py #2134: No IPv6 address will be assigned
> ERROR(exception): uncaught exception - File [/usr/share/samba/setup/ad-schema/AD_DS_Attributes_Windows_Server_v1903.ldf] not found. Please install samba-ad-provision package
> File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 285, in _run
> return self.run(*args, **kwargs)
> ^^^^^^^^^^^^^^^^^^^^^^^^^
> File "/usr/lib/python3/dist-packages/samba/netcmd/domain/backup.py", line 261, in run
> ctx = join_clone(logger=logger, creds=creds, lp=lp,
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> File "/usr/lib/python3/dist-packages/samba/join.py", line 1642, in join_clone
> ctx.do_join()
> File "/usr/lib/python3/dist-packages/samba/join.py", line 1696, in do_join
> ctx.join_provision()
> File "/usr/lib/python3/dist-packages/samba/join.py", line 861, in join_provision
> presult = provision(ctx.logger, system_session(), smbconf=smbconf,
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> File "/usr/lib/python3/dist-packages/samba/provision/__init__.py", line 2288, in provision
> schema = Schema(domainsid, invocationid=invocationid,
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> File "/usr/lib/python3/dist-packages/samba/schema.py", line 119, in __init__
> setup_path('ad-schema/%s' % Schema.base_schemas[base_schema][0]),
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> File "/usr/lib/python3/dist-packages/samba/provision/common.py", line 44, in setup_path
> raise Exception("File [%s] not found. Please install samba-ad-provision package" % path)
>
> Would that be it ?
>
> I recovered from a snapshot and it also works with samba-ad-provision
>
> LP
> On Jun 27, 2024 at 17:25 +0100, Rowland Penny via samba <samba at lists.samba.org>, wrote:
>> On Thu, 27 Jun 2024 17:12:38 +0100
>> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>>
>>> I can confirm that, in order to do backups from a member server, you
>>> need to install samba-ad-dc in the member server running > 4.20.
>>>
>> Whilst I do have samba-ad-dc installed on my Unix domain member, I fail
>> to see why it would be required for 'samba-tool domain backup online'
>> to work.
>>
>> It contains:
>>
>> /etc/init.d/samba-ad-dc
>> /lib/systemd/system/samba-ad-dc.service
>> /usr/sbin/samba
>> /usr/sbin/samba_dnsupdate
>> /usr/sbin/samba_kcc
>> /usr/sbin/samba_spnupdate
>> /usr/sbin/samba_upgradedns
>> /usr/share/doc/samba-ad-dc/changelog.Debian.gz
>> /usr/share/doc/samba-ad-dc/copyright
>> /usr/share/lintian/overrides/samba-ad-dc
>> /usr/share/man/man8/samba.8.gz
>>
>> I cannot see anything there that appears to be relevant.
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
--
Senior Webentwickler
Datenschutzbeauftragter
Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul
Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
LinkedIn: www.linkedin.com/company/ellerhold-gruppe
Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold
---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.
Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/
This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.
You can find our privacy policy here: http://www.ellerhold.de/datenschutz/
More information about the samba
mailing list