upgradeprovision failed
Matthias Dieter Wallnöfer
mdw at samba.org
Mon Jun 7 03:03:34 MDT 2010
Hi Rohit,
this is a case which isn't handled yet by the actual upgradeprovision.
You have to manually remove an entry called like this (I don't remember
the exact denomination):
CN=Well-Known-Security-Principal-System,CN=WellKnown Security
Principals,CN=Configuration,DC=xxxxxx,DC=com. And then rerun
upgradeprovision. This should work.
Matthias
Rohit Rajan wrote:
> Hi All,
>
> The upgrade provision failed with the following error, the version of
> samba i was upgrading is Version 4.0.0alpha12-GIT-e904443, with the
> latest "git pull" today morning 07/06/2010 9 AM IST
>
>
> ./scripting/bin/upgradeprovision --full -s /usr/local/samba/etc/smb.conf
> Creating a reference provision
> pdc_fsmo_init: no domain object present: (skip loading of domain details)
>
> naming_fsmo_init: no partitions dn present: (skip loading of naming
> contexts details)
>
> naming_fsmo_init: no partitions dn present: (skip loading of naming
> contexts details)
>
> naming_fsmo_init: no partitions dn present: (skip loading of naming
> contexts details)
>
> Copy samdb
> Update partitions filename if needed
> Doing schema update
> There are 0 missing objects
> There are 0 changed objects
> Done with schema update
> Scanning whole provision for updates and additions
> CN=DS-Replication-Get-Changes-In-Filtered-Set,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ebad865a-d649-416f-9922-456b53bbb5b8,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=96541a16-910a-4b66-acde-720a0dff03c7,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=9738c400-7795-4d6e-b19d-c16cd6486166,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=c88227bc-fcca-4b58-8d8a-cd3d64528a02,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=ipsecPolicy{72385236-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=0fc5a978-0059-4b0a-9dc2-9896e8e389a1,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNegotiationPolicy{59319BDF-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=6eb8eaf9-3403-4ba5-8b4b-ce349a4680ad,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=4d753a29-26ac-4d1a-bc80-311f947e4f0a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecISAKMPPolicy{72385231-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=61b34cb0-55ee-4be9-b595-97810b92b017,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=560cf82d-9572-48a3-9024-6f2b56f1f866,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=2951353e-d102-4ea5-906c-54247eeec741,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=abd97102-88dd-4013-a009-0e2c2f967ff6,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{72385232-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ipsecPolicy{72385230-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=bd3413c0-9559-469b-9f3d-51d7faabd81a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecFilter{7238523A-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=d668ad1f-cedd-4565-ab02-9385926ce4f5,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecISAKMPPolicy{72385237-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=c03b1f37-c240-4910-93c8-1544a452b4b5,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=4c0672a2-437c-4944-b953-5db8f111d665,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{59319C04-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ipsecNegotiationPolicy{7238523B-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=Reload-SSL-Certificate,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=System,CN=WellKnown Security
> Principals,CN=Configuration,DC=xxxxxx,DC=com
> CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=dcb3c95d-deb7-4c51-ad13-43a7d5d06fc7,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{594272E2-071D-11D3-AD22-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ef010a1e-bd88-48c8-a7af-2affd250d77d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=f58300d1-b71a-4DB6-88a1-a8b9538beaca,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=de10d491-909f-4fb0-9abb-4b7865c0fe80,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=56040c71-fe93-4037-8fe9-1a4d1a283009,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=4c022fd1-adab-4d84-a7f1-9580f03da856,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=002fb291-0d00-4b0c-8c00-fe7f50ce6f8d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=b96ed344-545a-4172-aa0c-68118202f125,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=aed72870-bf16-4788-8ac7-22299c8207f1,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=8f86b825-c322-4101-adc4-579f12d445db,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=9fea28ff-387f-4d57-866d-3893c50f373f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=MS-TS-GatewayAccess,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=4c93ad42-178a-4275-8600-16811d28f3aa,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{594272FD-071D-11D3-AD22-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=a3dac986-80e7-4e59-a059-54cb1ab43cb9,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=Private-Information,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=f814097b-3e3d-49ba-8a3a-092c25085f06,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{6A1F5C6F-72B7-11D2-ACF0-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=a1789bfb-e0a2-4739-8cc0-e77d892d080a,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=dda1d01d-4bd7-4c49-a184-46f9241b560e,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=caa2bfad-0cca-483b-8d00-347f943292a8,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=4aaabc3a-c416-4b9c-a6bb-4b453ab1c1f0,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=57428d75-bef7-43e1-938b-2e749f5a8d56,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=71482d49-8870-4cb3-a438-b6fc9ec35d70,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=231fb90b-c92a-40c9-9379-bacfc313a3e3,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=613bd063-e8e9-4a62-8f4c-cda566f7eb6f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecFilter{72385235-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=10338d31-2423-4dff-b4b5-ef025144b01f,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNegotiationPolicy{59319C01-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ipsecNFA{59319BF3-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=07e57d28-ad40-44fc-8334-8a0dc119b3f4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=6fd48655-1698-497a-ac8d-8267ce01c80b,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNegotiationPolicy{7238523F-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=Read-Only-Replication-Secret-Synchronization,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=2b9e0609-6d75-498a-9727-c9fcc93f0e42,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=Terminal-Server-License-Server,CN=Extended-Rights,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=3b3adbdb-4485-4559-aed8-9811c4bf90e4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ea08c04c-f474-4212-b19e-5e754f9210d4,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=0b7fb422-3609-4587-8c2e-94b10f67d1bf,CN=Operations,CN=DomainUpdates,CN=System,DC=xxxxxx,DC=com
>
> CN=2a858903-5696-4364-b4e5-4cac027ca7a6,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=a96e2ed5-7a7c-4d5c-9d5d-965eca0051da,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=ipsecNFA{7238523E-70FA-11D1-864C-14A300000000},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=429a6334-1a00-4515-bf48-676deb55954a,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=782370ce-3d38-438d-8b0c-464220a3039d,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=xxxxxx,DC=com
>
> CN=Owner Rights,CN=WellKnown Security
> Principals,CN=Configuration,DC=xxxxxx,DC=com
> CN=ipsecNFA{59319BE2-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> CN=ipsecNegotiationPolicy{59319BF0-5EE3-11D2-ACE8-0060B0ECCA17},CN=IP
> Security,CN=System,DC=xxxxxx,DC=com
> There are 78 missing objects
> Traceback (most recent call last):
> File "./scripting/bin/upgradeprovision", line 943, in ?
> update_samdb(newpaths, paths, creds, session, names)
> File "./scripting/bin/upgradeprovision", line 832, in update_samdb
> hashSD =
> check_diff_name(newpaths,paths,creds,session,str(names.rootdn),names,0)
> File "./scripting/bin/upgradeprovision", line 634, in check_diff_name
> add_missing_entries(newsam_ldb,sam_ldb,names,basedn,listMissing)
> File "./scripting/bin/upgradeprovision", line 543, in
> add_missing_entries
> ret =
> add_missing_object(newsam_ldb,sam_ldb,dn,names,basedn,hashMissing,index)
> File "./scripting/bin/upgradeprovision", line 509, in
> add_missing_object
> sam_ldb.add(delta,["relax:0"])
> _ldb.LdbError: (68, '../lib/ldb/ldb_tdb/ldb_index.c:1175: Failed to
> re-index objectSid in CN=System,CN=WellKnown Security
> Principals,CN=Configuration,DC=xxxxxx,DC=com -
> ../lib/ldb/ldb_tdb/ldb_index.c:1107: unique index violation on
> objectSid in CN=System,CN=WellKnown Security
> Principals,CN=Configuration,DC=xxxxxx,DC=com')
> A transaction is still active in ldb context [0xb827308] on
> /usr/local/samba/private/sam.ldb
>
> This message may contain confidential, proprietary or legally
> privileged information. In case you are not the original intended
> recipient of the message, you must not, directly or indirectly, use,
> disclose, distribute, print, or copy any part of this message and you
> are requested to delete it and inform the sender.
> Any views expressed in this message are those of the individual sender
> unless otherwise stated. Nothing contained in this message shall be
> construed as an offer or acceptance of any offer by "Catalyst Business
> Partners" or any of its subsidiaries unless sent with that express
> intent and with due authority of Catalyst Business Partners.
> Catalyst Business Partners has taken sufficient measures and
> precautions to prevent the spread of viruses. However the company
> accepts no liability for any damage caused by any virus transmitted by
> this email.
>
>
More information about the samba-technical
mailing list