Error with AD Takeover of 2003sbs part 2 :-(


#1

I got this to work in my lab a few months ago… but I am stymied here when trying to do it in production. I have been retrying this (restoring snapshots to pre-process state) all day.

The domain I am taking over is a 2003sbs, and I have the may 2016 installer for UCS4 and opted not to apply updates during the install (but I tried both ways). I initially joined the windows domain, was able to login as a domain admin to the UCS web manager fine, installed ad takover, then ran ad-takeover. I specified the existing ad server both by hostname and IP address, it sees the number of AD assets it needs to copy and then runs.

I am hoping to get this wrapped up over the weekend, but I have been hammering away all day today watching errors fly by. Any help or nudging in the right direction would be much appreciated!

When trying to takeover, the join fails with

Terminating running univention-cli-server processes. Samba4 does not seem to be provisioned, exiting /usr/lib/univention-install/97univention-s4-connector.inst EXITCODE=1

Below is the ad-takeover log

root@ucs1:~# tail -f /var/log/univention/ad-takeover.log 2016-07-16 15:27:10,463 Object created: cn=Remote Interactive Logon,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:10,571 modifying entry "cn=Remote Interactive Logon,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:11,521 Object created: cn=SChannel Authentication,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:11,604 modifying entry "cn=SChannel Authentication,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:12,499 Object created: cn=Digest Authentication,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:12,588 modifying entry "cn=Digest Authentication,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:13,487 Object created: cn=Terminal Server User,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:13,566 modifying entry "cn=Terminal Server User,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:14,510 Object created: cn=NTLM Authentication,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:14,595 modifying entry "cn=NTLM Authentication,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:15,518 Object created: cn=Other Organization,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:15,637 modifying entry "cn=Other Organization,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:16,507 Object created: cn=This Organization,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:16,572 modifying entry "cn=This Organization,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:17,419 Object created: cn=Anonymous Logon,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:17,497 modifying entry "cn=Anonymous Logon,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:18,552 Object created: cn=Network Service,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:18,654 modifying entry "cn=Network Service,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:19,637 Object created: cn=Creator Group,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:19,726 modifying entry "cn=Creator Group,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:20,579 Object created: cn=Creator Owner,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:20,659 modifying entry "cn=Creator Owner,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:21,578 Object created: cn=Local Service,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:21,654 modifying entry "cn=Local Service,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:22,601 Object created: cn=Owner Rights,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:22,684 modifying entry "cn=Owner Rights,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:23,643 Object created: cn=Interactive,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:23,730 modifying entry "cn=Interactive,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:24,704 Object created: cn=Restricted,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:24,786 modifying entry "cn=Restricted,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:25,644 Object created: cn=Network,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:25,749 modifying entry "cn=Network,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:26,715 Object created: cn=Service,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:26,790 modifying entry "cn=Service,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:27,701 Object created: cn=Dialup,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:27,777 modifying entry "cn=Dialup,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:28,779 Object created: cn=System,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:28,861 modifying entry "cn=System,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:29,766 Object created: cn=Batch,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:29,848 modifying entry "cn=Batch,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:31,027 Object created: cn=Proxy,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:31,113 modifying entry "cn=Proxy,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:32,080 Object created: cn=IUSR,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:32,161 modifying entry "cn=IUSR,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:33,034 Object created: cn=Self,cn=Builtin,dc=mydomainname,dc=local 2016-07-16 15:27:33,141 modifying entry "cn=Self,cn=Builtin,dc=mydomainname,dc=local" 2016-07-16 15:27:33,144 INFO: Detected adtakeover state start 2016-07-16 15:27:35,725 Setting slapd/port 2016-07-16 15:27:35,725 File: /etc/init.d/slapd 2016-07-16 15:27:35,726 Multifile: /etc/ldap/slapd.conf 2016-07-16 15:27:38,219 Setting slapd/port/ldaps 2016-07-16 15:27:38,219 File: /etc/init.d/slapd 2016-07-16 15:27:38,219 Multifile: /etc/ldap/slapd.conf 2016-07-16 15:27:38,272 Restarting ldap server(s). 2016-07-16 15:27:48,339 Stopping ldap server(s): slapd ...retry #1....done. 2016-07-16 15:27:48,513 Starting ldap server(s): slapd ...done. 2016-07-16 15:27:53,542 Checking Schema ID: ...done. 2016-07-16 15:27:54,545 INFO: Stopping univention-samba4 joinscript for AD-Takeover 2016-07-16 15:27:54,547 2016-07-16 15:27:54.546720499-08:00 (in joinscript_save_current_version) 2016-07-16 15:27:54,553 Calling: univention-run-join-scripts --run-scripts 97univention-s4-connector.inst 2016-07-16 15:27:55,661 univention-run-join-scripts: runs all join scripts existing on local computer. 2016-07-16 15:27:55,662 copyright (c) 2001-2016 Univention GmbH, Germany 2016-07-16 15:29:07,814 Running 97univention-s4-connector.ifailed (exitcode: 1) 2016-07-16 15:29:07,816 Starting phase I of the takeover process. 2016-07-16 15:29:07,817 Calling: univention-config-registry set hosts/static/192.168.10.1=DENALI.mydomainname.local DENALI 2016-07-16 15:29:08,208 Create hosts/static/192.168.10.1 2016-07-16 15:29:08,208 Multifile: /etc/hosts 2016-07-16 15:29:08,211 Calling: /etc/init.d/univention-s4-connector stop 2016-07-16 15:29:08,220 Stopping univention-s4-connector daemon. 2016-07-16 15:29:08,221 failed. 2016-07-16 15:29:08,221 Calling: /etc/init.d/samba-ad-dc stop 2016-07-16 15:29:08,265 Stopping Samba AD DC daemon: samba. 2016-07-16 15:29:08,266 Calling: univention-config-registry set nameserver1/local=192.168.10.1 nameserver1=192.168.10.1 directory/manager/web/modules/users/user/properties/username/syntax=string directory/manager/web/modules/groups/group/properties/name/syntax=string dns/backend=ldap 2016-07-16 15:29:08,575 Create nameserver1/local 2016-07-16 15:29:08,575 Setting nameserver1 2016-07-16 15:29:08,575 Setting directory/manager/web/modules/users/user/properties/username/syntax 2016-07-16 15:29:08,575 Create directory/manager/web/modules/groups/group/properties/name/syntax 2016-07-16 15:29:08,576 Setting dns/backend 2016-07-16 15:29:08,576 File: /etc/resolv.conf 2016-07-16 15:29:08,604 Calling: /etc/init.d/nscd stop 2016-07-16 15:29:08,644 Stopping Name Service Cache Daemon: nscd. 2016-07-16 15:29:08,644 Calling: /etc/init.d/bind9 restart 2016-07-16 15:29:19,383 Restarting bind9 daemon: ...done. 2016-07-16 15:29:19,383 Starting Samba domain join. 2016-07-16 15:29:19,847 workgroup is mydomainname 2016-07-16 15:29:19,847 realm is mydomainname.local 2016-07-16 15:29:21,024 Looking up IPv4 addresses 2016-07-16 15:29:21,026 Looking up IPv6 addresses 2016-07-16 15:29:21,028 No IPv6 address will be assigned 2016-07-16 15:29:21,714 Setting up share.ldb 2016-07-16 15:29:21,775 Setting up secrets.ldb 2016-07-16 15:29:21,836 Setting up the registry 2016-07-16 15:29:22,132 Setting up the privileges database 2016-07-16 15:29:22,238 Setting up idmap db 2016-07-16 15:29:22,296 Setting up SAM db 2016-07-16 15:29:22,314 Setting up sam.ldb partitions and settings 2016-07-16 15:29:22,316 Setting up sam.ldb rootDSE 2016-07-16 15:29:22,322 Pre-loading the Samba 4 and AD schema 2016-07-16 15:29:22,396 A Kerberos configuration suitable for Samba 4 has been generated at /var/lib/samba/private/krb5.conf 2016-07-16 15:29:22,605 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[402] linked_values[0] 2016-07-16 15:29:22,764 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[804] linked_values[0] 2016-07-16 15:29:22,976 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[1206] linked_values[0] 2016-07-16 15:29:23,140 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[1608] linked_values[0] 2016-07-16 15:29:23,355 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[2010] linked_values[0] 2016-07-16 15:29:23,507 Schema-DN[CN=Schema,CN=Configuration,DC=mydomainname,DC=local] objects[2348] linked_values[0] 2016-07-16 15:29:23,507 Analyze and apply schema objects 2016-07-16 15:29:24,631 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,632 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,636 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030002 2016-07-16 15:29:24,636 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030002 2016-07-16 15:29:24,636 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x66278359 2016-07-16 15:29:24,637 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE232A 2016-07-16 15:29:24,637 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,638 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE232A 2016-07-16 15:29:24,638 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030006 2016-07-16 15:29:24,639 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030006 2016-07-16 15:29:24,639 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,640 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,641 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFC 2016-07-16 15:29:24,641 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,641 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,642 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F 2016-07-16 15:29:24,643 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,644 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,644 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,645 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B 2016-07-16 15:29:24,645 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B 2016-07-16 15:29:24,646 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,646 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,647 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048 2016-07-16 15:29:24,648 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048 2016-07-16 15:29:24,648 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,649 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,650 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030041 2016-07-16 15:29:24,651 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030041 2016-07-16 15:29:24,651 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,653 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,653 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,656 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFD 2016-07-16 15:29:24,656 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012 2016-07-16 15:29:24,657 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,658 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2EE4 2016-07-16 15:29:24,659 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012 2016-07-16 15:29:24,659 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,659 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2EE4 2016-07-16 15:29:24,660 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,660 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012 2016-07-16 15:29:24,661 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,661 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012 2016-07-16 15:29:24,662 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,662 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,663 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,665 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,666 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,667 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1B64 2016-07-16 15:29:24,667 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,667 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003003E 2016-07-16 15:29:24,681 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,681 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,682 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 2016-07-16 15:29:24,715 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2EE4 2016-07-16 15:29:24,725 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,725 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2EE4 2016-07-16 15:29:24,726 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFA 2016-07-16 15:29:24,726 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F 2016-07-16 15:29:24,726 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,727 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,727 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE07D1 2016-07-16 15:29:24,727 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,728 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,728 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFA 2016-07-16 15:29:24,733 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2EE4 2016-07-16 15:29:24,734 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030050 2016-07-16 15:29:24,748 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x66278366 2016-07-16 15:29:24,748 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x66278365 2016-07-16 15:29:24,751 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x66278366 2016-07-16 15:29:24,751 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x66278365 2016-07-16 15:29:24,806 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,807 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,808 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,808 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFC 2016-07-16 15:29:24,809 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F 2016-07-16 15:29:24,810 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,810 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,811 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B 2016-07-16 15:29:24,811 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B 2016-07-16 15:29:24,812 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048 2016-07-16 15:29:24,812 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048 2016-07-16 15:29:24,813 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,813 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,814 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,815 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,815 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE2AFD 2016-07-16 15:29:24,816 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,817 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,817 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,818 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,819 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,819 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,819 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,820 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,820 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,820 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1B64 2016-07-16 15:29:24,820 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,821 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 2016-07-16 15:29:24,822 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F 2016-07-16 15:29:24,823 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 2016-07-16 15:29:24,823 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 2016-07-16 15:29:24,824 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x63EE1389 2016-07-16 15:29:24,825 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030050 2016-07-16 15:29:24,840 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,841 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,841 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,842 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D 2016-07-16 15:29:24,845 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030050 2016-07-16 15:29:28,205 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[402] linked_values[0] 2016-07-16 15:29:29,097 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[804] linked_values[0] 2016-07-16 15:29:29,795 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[1206] linked_values[0] 2016-07-16 15:29:30,653 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[1608] linked_values[0] 2016-07-16 15:29:31,494 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[2010] linked_values[0] 2016-07-16 15:29:32,342 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[2412] linked_values[0] 2016-07-16 15:29:33,229 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[2814] linked_values[0] 2016-07-16 15:29:34,055 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[3216] linked_values[0] 2016-07-16 15:29:35,080 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[3618] linked_values[0] 2016-07-16 15:29:36,009 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[4016] linked_values[0] 2016-07-16 15:29:36,846 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[4154] linked_values[0] 2016-07-16 15:29:37,278 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[4290] linked_values[0] 2016-07-16 15:29:37,647 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[4424] linked_values[0] 2016-07-16 15:29:38,107 Partition[CN=Configuration,DC=mydomainname,DC=local] objects[4579] linked_values[0] 2016-07-16 15:29:38,632 Partition[DC=mydomainname,DC=local] objects[93] linked_values[0] 2016-07-16 15:29:39,311 Partition[DC=mydomainname,DC=local] objects[380] linked_values[0] 2016-07-16 15:29:39,807 Failed to apply records: attribute 'dnsRecord': value #1 on 'DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=mydomainname,DC=local' provided more than once: Attribute or value exists 2016-07-16 15:29:39,807 Failed to commit objects: WERR_GENERAL_FAILURE 2016-07-16 15:29:39,996 ERROR(<type 'exceptions.TypeError'>): uncaught exception - Failed to process chunk: NT_STATUS_UNSUCCESSFUL 2016-07-16 15:29:39,997 File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run 2016-07-16 15:29:40,009 return self.run(*args, **kwargs) 2016-07-16 15:29:40,009 File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 628, in run 2016-07-16 15:29:40,031 keep_existing=keep_existing) 2016-07-16 15:29:40,031 File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1177, in join_DC 2016-07-16 15:29:40,042 ctx.do_join() 2016-07-16 15:29:40,042 File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1082, in do_join 2016-07-16 15:29:40,043 ctx.join_replicate() 2016-07-16 15:29:40,043 File "/usr/lib/python2.7/dist-packages/samba/join.py", line 835, in join_replicate 2016-07-16 15:29:40,043 replica_flags=ctx.domain_replica_flags) 2016-07-16 15:29:40,044 File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 257, in replicate 2016-07-16 15:29:40,046 schema=schema, req_level=req_level, req=req) 2016-07-16 15:29:40,111 checking sAMAccountName 2016-07-16 15:29:40,111 removing samaccount: CN=ucs1,CN=Computers,DC=mydomainname,DC=local 2016-07-16 15:29:40,112 Deleted CN=ucs1,CN=Computers,DC=mydomainname,DC=local 2016-07-16 15:29:40,112 Adding CN=UCS1,OU=Domain Controllers,DC=mydomainname,DC=local 2016-07-16 15:29:40,112 Adding CN=UCS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomainname,DC=local 2016-07-16 15:29:40,112 Adding CN=NTDS Settings,CN=UCS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomainname,DC=local 2016-07-16 15:29:40,113 Adding SPNs to CN=UCS1,OU=Domain Controllers,DC=mydomainname,DC=local 2016-07-16 15:29:40,113 Setting account password for UCS1$ 2016-07-16 15:29:40,113 Enabling account 2016-07-16 15:29:40,113 Calling bare provision 2016-07-16 15:29:40,113 Provision OK for domain DN DC=mydomainname,DC=local 2016-07-16 15:29:40,113 Starting replication 2016-07-16 15:29:40,114 Replicating critical objects from the base DN of the domain 2016-07-16 15:29:40,114 Join failed - cleaning up 2016-07-16 15:29:40,114 checking sAMAccountName 2016-07-16 15:29:40,115 removing samaccount: CN=UCS1,OU=Domain Controllers,DC=mydomainname,DC=local 2016-07-16 15:29:40,115 Deleted CN=UCS1,OU=Domain Controllers,DC=mydomainname,DC=local 2016-07-16 15:29:40,115 Deleted CN=NTDS Settings,CN=UCS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomainname,DC=local 2016-07-16 15:29:40,116 Deleted CN=UCS1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomainname,DC=local 2016-07-16 15:29:40,168 Calling: univention-config-registry unset hosts/static/192.168.10.1 2016-07-16 15:29:40,580 Unsetting hosts/static/192.168.10.1 2016-07-16 15:29:40,581 Multifile: /etc/hosts 2016-07-16 15:29:40,588 Calling: /etc/init.d/samba-ad-dc start 2016-07-16 15:29:41,828 Starting Samba AD DC daemon: samba. 2016-07-16 15:29:41,829 Calling: /etc/init.d/univention-s4-connector start 2016-07-16 15:29:41,912 Starting univention-s4-connector daemon. 2016-07-16 15:29:45,582 done. 2016-07-16 15:29:45,582 Calling: univention-config-registry set nameserver1=192.168.10.1 2016-07-16 15:29:45,771 Setting nameserver1 2016-07-16 15:29:45,771 File: /etc/resolv.conf 2016-07-16 15:29:45,783 Calling: univention-config-registry unset nameserver1/local 2016-07-16 15:29:45,961 Unsetting nameserver1/local 2016-07-16 15:29:45,961 File: /etc/resolv.conf 2016-07-16 15:29:45,962 Calling: univention-config-registry set dns/backend=samba4 2016-07-16 15:29:46,089 Setting dns/backend 2016-07-16 15:29:46,090 Calling: /etc/init.d/bind9 restart 2016-07-16 15:30:01,963 Restarting bind9 daemon: ...done. 2016-07-16 15:30:01,963 Calling: /etc/init.d/nscd restart 2016-07-16 15:30:02,153 Restarting Name Service Cache Daemon: nscd. 2016-07-16 15:30:02,153 The domain join failed. See /var/log/univention/ad-takeover.log for details.

Here is the join log

[code]univention-run-join-scripts started
Sat Jul 16 15:27:55 AKDT 2016

RUNNING 97univention-s4-connector.inst
2016-07-16 15:27:55.696028399-08:00 (in joinscript_init)
Create connector/s4/ldap/host
Create connector/s4/ldap/base
Not updating connector/s4/ldap/ssl
Create connector/s4/mapping/group/language
Create connector/s4/ldap/protocol
Create connector/s4/ldap/socket
Object created: cn=gPLink,cn=custom attributes,cn=univention,dc=mydomainname,dc=local
Object exists: cn=Builtin,dc=mydomainname,dc=local
Object created: cn=System,dc=mydomainname,dc=local
Object created: cn=Policies,cn=System,dc=mydomainname,dc=local
Object created: ou=Domain Controllers,dc=mydomainname,dc=local
Object created: cn=WMIPolicy,cn=System,dc=mydomainname,dc=local
Object created: cn=SOM,cn=WMIPolicy,cn=System,dc=mydomainname,dc=local
Object exists: cn=ldapschema,cn=univention,dc=mydomainname,dc=local
Object exists: cn=udm_module,cn=univention,dc=mydomainname,dc=local
Object created: cn=msgpo,cn=ldapschema,cn=univention,dc=mydomainname,dc=local

Object created: cn=mswmi,cn=ldapschema,cn=univention,dc=mydomainname,dc=local

Object created: cn=container/msgpo,cn=udm_module,cn=univention,dc=mydomainname,dc=local

Waiting for activation of the extension object msgpo:…OK
Waiting for activation of the extension object mswmi: OK
Waiting for activation of the extension object container/msgpo: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/container/msgpo.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=udm_module,cn=univention,dc=mydomainname,dc=local
Object created: cn=settings/mswmifilter,cn=udm_module,cn=univention,dc=mydomainname,dc=local

Waiting for activation of the extension object settings/mswmifilter: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/mswmifilter.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=ldapschema,cn=univention,dc=mydomainname,dc=local
Object exists: cn=udm_module,cn=univention,dc=mydomainname,dc=local
Object created: cn=msprintconnectionpolicy,cn=ldapschema,cn=univention,dc=mydomainname,dc=local

Object created: cn=settings/msprintconnectionpolicy,cn=udm_module,cn=univention,dc=mydomainname,dc=local

Waiting for activation of the extension object msprintconnectionpolicy:…OK
Waiting for activation of the extension object settings/msprintconnectionpolicy: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/msprintconnectionpolicy.py: OK
Terminating running univention-cli-server processes.
Samba4 does not seem to be provisioned, exiting /usr/lib/univention-install/97univention-s4-connector.inst
EXITCODE=1

Sat Jul 16 15:29:07 AKDT 2016
univention-run-join-scripts finished
[/code]


#2

Once again, I find myself answering my own post. This time… it was a missing root hint on the domain controller. I can’t believe it… an entire day. I looked closer at the various logs, and found some errors I could search and something mentioned root hints in the DNS records reuqired for AD connector.

Anyway, if I have more issues, I will reply back here, but so far so good!