samba 4.7.0 AD DC: FSMO roles transfer error

[Daniele Dario]

Hi Rowland,
the DCs are both local and running on ubuntu 16.04 x64.

The timeout problem disappear if I put a second delay between transfer
calls.

The other error happens exactly when transfer dns roles is performed and
adding the import seems to fix the issue.

Daniele

On Oct 11, 2017 5:07 PM, "Rowland Penny via samba-technical" <
samba-technical at lists.samba.org> wrote:

> On Wed, 11 Oct 2017 12:25:51 +0200
> Daniele Dario via samba-technical <samba-technical at lists.samba.org>
> wrote:
>
> > Hi samba team,
> > I'm upgrading my two DCs to 4.7.0 from 4.6.5 and as advised I started
> > upgrading the DC which doesn't hold the FSMO roles.
> >
> > After successfully upgraded it I tried to transfer the roles to the
> > other one but encountered some issues:
> >
> > [root at kdc02:~/src/samba-4.7.0]# samba-tool fsmo transfer --role=all -U
> > administrator
> > FSMO transfer of 'rid' role successful
> > ERROR: Transfer of 'pdc' role failed: Failed FSMO transfer:
> > NT_STATUS_IO_TIMEOUT
> > [root at kdc02:~/src/samba-4.7.0]# samba-tool fsmo transfer --role=all -U
> > administrator
> > This DC already has the 'rid' FSMO role
> > This DC already has the 'pdc' FSMO role
> > FSMO transfer of 'naming' role successful
> > ERROR: Transfer of 'infrastructure' role failed: Failed FSMO transfer:
> > NT_STATUS_IO_TIMEOUT
> > [root at kdc02:~/src/samba-4.7.0]# samba-tool fsmo transfer --role=all -U
> > administrator
> > This DC already has the 'rid' FSMO role
> > This DC already has the 'pdc' FSMO role
> > This DC already has the 'naming' FSMO role
> > This DC already has the 'infrastructure' FSMO role
> > This DC already has the 'schema' FSMO role
> > Password for [SAITEL\administrator]:
> > ERROR(<type 'exceptions.AttributeError'>): uncaught exception -
> > 'module' object has no attribute 'drs_utils'
> >   File
> > "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> > line 176, in _run
> >     return self.run(*args, **kwargs)
> >   File
> > "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/fsmo.py",
> > line 515, in run
> >     "domaindns", samdb)
> >   File
> > "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/fsmo.py",
> > line 129, in transfer_dns_role
> >     except samba.drs_utils.drsException, e:
> >
> > AFAICS, there's a missing "import samba.drs_utils" in fsmo.py.
> >
> > Also, if I add a time.sleep(1) between the "transfer_role" statements
> > I don't hit the timeout issue when transferring multiple roles on the
> > same time.
> >
> > Daniele.
> >
> >
>
> Not sure that is the problem, 'samba.drs_utils' is only used when
> transferring the dns FSMO roles and you seem to be having problems
> before this:  ERROR: Transfer of 'pdc' role failed:
>
> What OS is this running on and are the two DCs local ?
>
> Rowland
>
>
>