Migration Samba 3 > 4

Hallo,

ich habe auf einer Testmaschine eine Migration von Samba 3 auf 4 versucht.

Dabei habe ich die Fehlermeldung erhalten, dass das Provisioning fehlschlug, weil die secrets.tdb nicht gefunden wurde.
Gesucht wurde sie wohl hier: /var/lib/samba3/secrets.tdb
Tatsächlich befindet sie sich hier: /var/lib/samba/secrets.tdb
(ich habe auf der Original-Maschine nachgesehen. Am Testsystem gibt es nun nach dem Migrationsversuch eine Datei namens /var/lib/samba/private/secrets.tdb )

Die UCS-Version des Servers ist derzeit 3.1.1-91
Ich habe die Testmaschine auf 4.1.0-99 upgedated, bevor ich die Migration versucht habe. Kann es daran liegen?

Hat jemand einen Tipp für mich?

[code]root@pdc:~/siedl# cat set_ucr_samba4_prepare.sh
#!/bin/bash

ucr set samba4/ignore/mixsetup=yes
samba4/ntacl/backend=native
samba/debug/level=1
connector/s4/mapping/group/grouptype=false

root@pdc:~/siedl#
root@pdc:~/siedl#
root@pdc:~/siedl# ./set_ucr_samba4_prepare.sh
Setting samba4/ignore/mixsetup
Setting samba4/ntacl/backend
Setting samba/debug/level
Setting connector/s4/mapping/group/grouptype
root@pdc:~/siedl#
root@pdc:~/siedl#
root@pdc:~/siedl# univention-install univention-s4-connector
Ign file: Release.gpg
Ign file: Release.gpg
Ign file: Release
Ign file: Release
OK https://updates.software-univention.de 4.0-0/all/ Release.gpg
OK https://updates.software-univention.de 4.0-0/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-1/all/ Release.gpg
OK https://updates.software-univention.de 4.0-1/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-2/all/ Release.gpg
OK https://updates.software-univention.de 4.0-2/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-3/all/ Release.gpg
OK https://updates.software-univention.de 4.0-3/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-4/all/ Release.gpg
OK https://updates.software-univention.de 4.0-4/amd64/ Release.gpg
OK https://updates.software-univention.de 4.1-0/all/ Release.gpg
OK https://updates.software-univention.de 4.1-0/amd64/ Release.gpg
OK https://updates.software-univention.de 4.1-0-errata/all/ Release.gpg
OK https://updates.software-univention.de 4.1-0-errata/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-4-errata/all/ Release.gpg
OK https://updates.software-univention.de 4.0-4-errata/amd64/ Release.gpg
OK https://updates.software-univention.de 3.2-7-errata/all/ Release.gpg
OK https://updates.software-univention.de 3.2-7-errata/amd64/ Release.gpg
OK https://updates.software-univention.de 4.0-0/all/ Release
OK https://updates.software-univention.de 4.0-0/amd64/ Release
OK https://updates.software-univention.de 4.0-1/all/ Release
OK https://updates.software-univention.de 4.0-1/amd64/ Release
OK https://updates.software-univention.de 4.0-2/all/ Release
OK https://updates.software-univention.de 4.0-2/amd64/ Release
OK https://updates.software-univention.de 4.0-3/all/ Release
OK https://updates.software-univention.de 4.0-3/amd64/ Release
OK https://updates.software-univention.de 4.0-4/all/ Release
OK https://updates.software-univention.de 4.0-4/amd64/ Release
OK https://updates.software-univention.de 4.1-0/all/ Release
OK https://updates.software-univention.de 4.1-0/amd64/ Release
OK https://updates.software-univention.de 4.1-0-errata/all/ Release
OK https://updates.software-univention.de 4.1-0-errata/amd64/ Release
OK https://updates.software-univention.de 4.0-4-errata/all/ Release
OK https://updates.software-univention.de 4.0-4-errata/amd64/ Release
OK https://updates.software-univention.de 3.2-7-errata/all/ Release
OK https://updates.software-univention.de 3.2-7-errata/amd64/ Release
OK https://updates.software-univention.de 4.0-0/all/ Packages
OK https://updates.software-univention.de 4.0-0/amd64/ Packages
OK https://updates.software-univention.de 4.0-1/all/ Packages
OK https://updates.software-univention.de 4.0-1/amd64/ Packages
OK https://updates.software-univention.de 4.0-2/all/ Packages
OK https://updates.software-univention.de 4.0-2/amd64/ Packages
OK https://updates.software-univention.de 4.0-3/all/ Packages
OK https://updates.software-univention.de 4.0-3/amd64/ Packages
OK https://updates.software-univention.de 4.0-4/all/ Packages
OK https://updates.software-univention.de 4.0-4/amd64/ Packages
OK https://updates.software-univention.de 4.1-0/all/ Packages
OK https://updates.software-univention.de 4.1-0/amd64/ Packages
OK https://updates.software-univention.de 4.1-0-errata/all/ Packages
OK https://updates.software-univention.de 4.1-0-errata/amd64/ Packages
OK https://updates.software-univention.de 4.0-4-errata/all/ Packages
OK https://updates.software-univention.de 4.0-4-errata/amd64/ Packages
OK https://updates.software-univention.de 3.2-7-errata/all/ Packages
OK https://updates.software-univention.de 3.2-7-errata/amd64/ Packages
Paketlisten werden gelesen…
Paketlisten werden gelesen…
Abhängigkeitsbaum wird aufgebaut…
Statusinformationen werden eingelesen…
Die folgenden zusätzlichen Pakete werden installiert:
python-pysqlite2 python-univention-connector-s4 sqlite3
univention-nagios-s4-connector univention-samba-local-config
univention-samba4 univention-samba4-sysvol-sync
Vorgeschlagene Pakete:
python-pysqlite2-doc python-pysqlite2-dbg sqlite3-doc
Die folgenden NEUEN Pakete werden installiert:
python-pysqlite2 python-univention-connector-s4 sqlite3
univention-nagios-s4-connector univention-s4-connector
univention-samba-local-config univention-samba4
univention-samba4-sysvol-sync
0 aktualisiert, 8 neu installiert, 0 zu entfernen und 0 nicht aktualisiert.
Es müssen 531 kB an Archiven heruntergeladen werden.
Nach dieser Operation werden 2.145 kB Plattenplatz zusätzlich benutzt.
Möchten Sie fortfahren [J/n]? J
Holen: 1 https://updates.software-univention.de/4.0/maintained/ 4.0-0/amd64/ python-pysqlite2 2.6.3-3.10.201403131551 [69,2 kB]
Holen: 2 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/all/ python-univention-connector-s4 10.0.1-10.604.201601201402 [106 kB]
Holen: 3 https://updates.software-univention.de/4.0/maintained/ 4.0-0/amd64/ sqlite3 3.7.13-1.23.201403202219 [119 kB]
Holen: 4 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/amd64/ univention-nagios-s4-connector 1.0.0-3.3.201512090901 [7.282 B]
Holen: 5 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/all/ univention-samba-local-config 10.0.1-6.504.201512020942 [25,0 kB]
Holen: 6 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/all/ univention-samba4-sysvol-sync 5.0.1-25.645.201601281632 [37,5 kB]
Holen: 7 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/amd64/ univention-samba4 5.0.1-25.645.201601281632 [94,8 kB]
Holen: 8 https://updates.software-univention.de/4.1/maintained/component/ 4.1-0-errata/all/ univention-s4-connector 10.0.1-10.604.201601201402 [72,7 kB]
Es wurden 531 kB in 0 s geholt (680 kB/s).
Vormals nicht ausgewähltes Paket python-pysqlite2 wird gewählt.
(Lese Datenbank … 159153 Dateien und Verzeichnisse sind derzeit installiert.)
Entpacken von python-pysqlite2 (aus …/python-pysqlite2_2.6.3-3.10.201403131551_amd64.deb) …
Vormals nicht ausgewähltes Paket python-univention-connector-s4 wird gewählt.
Entpacken von python-univention-connector-s4 (aus …/python-univention-connector-s4_10.0.1-10.604.201601201402_all.deb) …
Vormals nicht ausgewähltes Paket sqlite3 wird gewählt.
Entpacken von sqlite3 (aus …/sqlite3_3.7.13-1.23.201403202219_amd64.deb) …
Vormals nicht ausgewähltes Paket univention-nagios-s4-connector wird gewählt.
Entpacken von univention-nagios-s4-connector (aus …/univention-nagios-s4-connector_1.0.0-3.3.201512090901_amd64.deb) …
Vormals nicht ausgewähltes Paket univention-samba-local-config wird gewählt.
Entpacken von univention-samba-local-config (aus …/univention-samba-local-config_10.0.1-6.504.201512020942_all.deb) …
Vormals nicht ausgewähltes Paket univention-samba4-sysvol-sync wird gewählt.
Entpacken von univention-samba4-sysvol-sync (aus …/univention-samba4-sysvol-sync_5.0.1-25.645.201601281632_all.deb) …
Vormals nicht ausgewähltes Paket univention-samba4 wird gewählt.
Entpacken von univention-samba4 (aus …/univention-samba4_5.0.1-25.645.201601281632_amd64.deb) …
Vormals nicht ausgewähltes Paket univention-s4-connector wird gewählt.
Entpacken von univention-s4-connector (aus …/univention-s4-connector_10.0.1-10.604.201601201402_all.deb) …
Trigger für man-db werden verarbeitet …
Trigger für univention-config werden verarbeitet …
dpkg-query: Kein Paket gefunden, das auf ldapacl_66univention-appcenter_app.acl passt
python-pysqlite2 (2.6.3-3.10.201403131551) wird eingerichtet …
python-univention-connector-s4 (10.0.1-10.604.201601201402) wird eingerichtet …
sqlite3 (3.7.13-1.23.201403202219) wird eingerichtet …
univention-nagios-s4-connector (1.0.0-3.3.201512090901) wird eingerichtet …
File: /etc/nagios-plugins/config/univention-s4-connector.cfg
Calling joinscript 31univention-nagios-s4-connector.inst …
2016-02-05 11:10:26.190360465+01:00 (in joinscript_init)
Object created: cn=UNIVENTION_S4CONNECTOR,cn=nagios,dc=firma,dc=at
Object modified: cn=UNIVENTION_S4CONNECTOR,cn=nagios,dc=firma,dc=at
2016-02-05 11:10:27.238056025+01:00 (in joinscript_save_current_version)
Joinscript 31univention-nagios-s4-connector.inst finished with exitcode 0
univention-samba-local-config (10.0.1-6.504.201512020942) wird eingerichtet …
Neue Version der Konfigurationsdatei /etc/univention/templates/scripts/samba.local.config.py wird installiert …
Script: /etc/univention/templates/scripts/samba.local.config.py
Multifile: /etc/samba/smb.conf
univention-samba4-sysvol-sync (5.0.1-25.645.201601281632) wird eingerichtet …
Neue Version der Konfigurationsdatei /etc/univention/registry.info/variables/univention-samba4-sysvol-sync.cfg wird installiert …
File: /etc/cron.d/sysvol-cleanup
File: /etc/cron.d/sysvol-sync
Not updating samba4/sysvol/cleanup/cron
Create sshd/config/ClientAliveInterval
File: /etc/ssh/sshd_config
[ ok ] Reloading OpenBSD Secure Shell server’s configuration: sshd.
univention-samba4 (5.0.1-25.645.201601281632) wird eingerichtet …
Neue Version der Konfigurationsdatei /etc/univention/registry.info/variables/univention-samba4.cfg wird installiert …
Neue Version der Konfigurationsdatei /etc/univention/templates/info/univention-samba4.info wird installiert …
Neue Version der Konfigurationsdatei /etc/univention/templates/files/etc/samba/base.conf wird installiert …
Neue Version der Konfigurationsdatei /etc/univention/templates/files/etc/samba/smb.conf.d/10global wird installiert …
File: /etc/logrotate.d/univention-samba4
File: /etc/pam.d/samba
File: /etc/cron.d/univention-samba4-backup
File: /etc/logrotate.d/winbind
File: /etc/logrotate.d/samba
File: /etc/samba/base.conf
Multifile: /etc/samba/smb.conf
dpkg-statoverride: Fehler: Ein Override für »/var/log/samba« existiert bereits, Abbruch
Not updating samba/share/home
Not updating samba/share/groups
Not updating samba/adminusers
Not updating samba/encrypt_passwords
Not updating samba/use_spnego
Not updating samba/oplocks
Not updating samba/kernel_oplocks
Not updating samba/large_readwrite
Not updating samba/deadtime
Not updating samba/read_raw
Not updating samba/write_raw
Not updating samba/max_xmit
Create samba/max_open_files
Not updating samba/getwd_cache
Not updating samba/store_dos_attributes
Not updating samba/preserve_case
Not updating samba/short_preserve_case
Not updating samba/guest_account
Not updating samba/map_to_guest
Not updating samba/enable-msdfs
Not updating samba/acl/allow/execute/always
Create samba/register/exclude/interfaces
Multifile: /etc/samba/smb.conf
Not updating samba/profileserver
Not updating samba/profilepath
Not updating samba/homedirserver
Not updating samba/homedirpath
Not updating samba/homedirletter
Not updating samba/debug/level
Not updating samba4/sysvol/sync/jitter
Not updating samba4/service/smb
Not updating samba4/service/nmb
Not updating samba4/ntacl/backend
Not updating samba4/sysvol/sync/setfacl/AU
Not updating samba4/backup/cron
Create security/packetfilter/package/univention-samba4/tcp/389/all
Create security/packetfilter/package/univention-samba4/tcp/389/all/en
Create security/packetfilter/package/univention-samba4/udp/389/all
Create security/packetfilter/package/univention-samba4/udp/389/all/en
Create security/packetfilter/package/univention-samba4/tcp/636/all
Create security/packetfilter/package/univention-samba4/tcp/636/all/en
Create security/packetfilter/package/univention-samba4/tcp/53/all
Create security/packetfilter/package/univention-samba4/tcp/53/all/en
Create security/packetfilter/package/univention-samba4/udp/53/all
Create security/packetfilter/package/univention-samba4/udp/53/all/en
Create security/packetfilter/package/univention-samba4/udp/123/all
Create security/packetfilter/package/univention-samba4/udp/123/all/en
Create security/packetfilter/package/univention-samba4/tcp/135/all
Create security/packetfilter/package/univention-samba4/tcp/135/all/en
Create security/packetfilter/package/univention-samba4/tcp/137:139/all
Create security/packetfilter/package/univention-samba4/tcp/137:139/all/en
Create security/packetfilter/package/univention-samba4/udp/137:139/all
Create security/packetfilter/package/univention-samba4/udp/137:139/all/en
Create security/packetfilter/package/univention-samba4/tcp/445/all
Create security/packetfilter/package/univention-samba4/tcp/445/all/en
Create security/packetfilter/package/univention-samba4/udp/445/all
Create security/packetfilter/package/univention-samba4/udp/445/all/en
Create security/packetfilter/package/univention-samba4/tcp/1024/all
Create security/packetfilter/package/univention-samba4/tcp/1024/all/en
Create security/packetfilter/package/univention-samba4/tcp/3268/all
Create security/packetfilter/package/univention-samba4/tcp/3268/all/en
Create security/packetfilter/package/univention-samba4/tcp/3269/all
Create security/packetfilter/package/univention-samba4/tcp/3269/all/en
Create security/packetfilter/package/univention-samba4/tcp/88/all
Create security/packetfilter/package/univention-samba4/tcp/88/all/en
Create security/packetfilter/package/univention-samba4/udp/88/all
Create security/packetfilter/package/univention-samba4/udp/88/all/en
Create security/packetfilter/package/univention-samba4/tcp/464/all
Create security/packetfilter/package/univention-samba4/tcp/464/all/en
Create security/packetfilter/package/univention-samba4/udp/464/all
Create security/packetfilter/package/univention-samba4/udp/464/all/en
Create security/packetfilter/package/univention-samba4/tcp/749/all
Create security/packetfilter/package/univention-samba4/tcp/749/all/en
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
[ ok ] Stopping Univention iptables configuration::.
Univention iptables configuration has been disabled.
[ ok ] Starting NetBIOS name server: nmbd.
smbd disabled by ucr var samba/autostart=no
Samba is not configured as AD DC.
[info] Restarting univention-directory-listener daemon.
ok: run: univention-directory-listener: (pid 31186) 0s, normally down
done.
Calling joinscript 96univention-samba4.inst …
2016-02-05 11:10:39.339502711+01:00 (in joinscript_init)
WARNING: It is not possible to install a samba 4 domaincontroller
into a samba 3 environment. samba4/ignore/mixsetup is true.
Continue as requested
Create samba4/role
File: /etc/samba/base.conf
Multifile: /etc/samba/smb.conf
Multifile: /etc/samba/smb.conf
Setting samba/quota/command
Multifile: /etc/samba/smb.conf
[ ok ] Stopping Samba AD DC daemon: samba.
Samba is configured as AD DC, service smbd is controlled by the main samba daemon.
[ ok ] Stopping NetBIOS name server: nmbd.
Stopping Heimdal password server: kpasswdd.
Stopping Heimdal KDC: heimdal-kdc.
Setting kerberos/autostart
Create samba4/autostart
Multifile: /etc/samba/smb.conf
Create samba4/ldap/base
Multifile: /etc/samba/smb.conf
Object exists: cn=Builtin,dc=firma,dc=at
WARNING: cannot append cn=pdc,cn=dc,cn=computers,dc=firma,dc=at to hosts, value exists
No modification: cn=Enterprise Domain Controllers,cn=groups,dc=firma,dc=at
Create samba/share/netlogon
File: /etc/samba/base.conf
Multifile: /etc/samba/smb.conf
[ ok ] Stopping Samba AD DC daemon: samba.
Samba is configured as AD DC, service smbd is controlled by the main samba daemon.
[ ok ] Stopping NetBIOS name server: nmbd.
Create kerberos/kdc
Create kerberos/kpasswdserver
File: /etc/krb5.conf
extract_rIDNextRID: Attribute rIDSetReferences not found
WARNING: The following Samba 3 domaincontroller have been found:
bdc
It is not possible to install a samba 4 domaincontroller
into a samba 3 environment.samba4/ignore/mixsetup is true.
Continue as requested
Object modified: cn=Windows Hosts,cn=groups,dc=firma,dc=at
Object modified: cn=DC Backup Hosts,cn=groups,dc=firma,dc=at
Object modified: cn=DC Slave Hosts,cn=groups,dc=firma,dc=at
Object modified: cn=Computers,cn=groups,dc=firma,dc=at
Object modified: cn=Power Users,cn=groups,dc=firma,dc=at
UPN: None
Reading smb.conf
WARNING: The “syslog” option is deprecated
WARNING: The “idmap backend” option is deprecated
WARNING: The “idmap uid” option is deprecated
WARNING: The “idmap gid” option is deprecated
WARNING: The “use spnego” option is deprecated
Provisioning
ERROR(<class ‘samba.provision.ProvisioningError’>): uncaught exception - ProvisioningError: Could not open ‘/var/lib/samba3/secrets.tdb’, the Samba3 secrets database: [Errno 2] No such file or directory. Perhaps you specified the incorrect smb.conf, --testparm or --dbdir option?
File “/usr/lib/python2.7/dist-packages/samba/netcmd/init.py”, line 175, in _run
return self.run(*args, **kwargs)
File “/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py”, line 1471, in run
useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs, no_upn=no_upn)
File “/usr/lib/python2.7/dist-packages/samba/upgrade.py”, line 479, in upgrade_from_samba3
raise ProvisioningError(“Could not open ‘%s’, the Samba3 secrets database: %s. Perhaps you specified the incorrect smb.conf, --testparm or --dbdir option?” % (samba3.privatedir_path(“secrets.tdb”), str(e)))
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 8
Modify failed after processing 0 records
ERROR: Failed to set password for user ‘pdc$’: (34, “ldb_search: invalid basedn ‘(null)’”)
ERROR: Failed to set password for user ‘Administrator’: (34, “ldb_search: invalid basedn ‘(null)’”)
cp: Aufruf von stat für „/var/lib/samba/private/phpldapadmin-config.php“ nicht möglich: Datei oder Verzeichnis nicht gefunden
Setting slapd/port
File: /etc/init.d/slapd
Multifile: /etc/ldap/slapd.conf
Setting slapd/port/ldaps
File: /etc/init.d/slapd
Multifile: /etc/ldap/slapd.conf
Setting ldap/server/port
File: /etc/pam.d/smtp
Multifile: /etc/simplesamlphp/authsources.php
File: /etc/pam_ldap.conf
File: /etc/runit/univention-directory-listener/run
Multifile: /etc/postfix/ldap.virtual
Multifile: /etc/postfix/ldap.canonicalrecipient
Multifile: /etc/postfix/ldap.transport
File: /etc/libnss-ldap.conf
Multifile: /etc/postfix/ldap.saslusermapping
Multifile: /etc/postfix/ldap.virtualdomains
Multifile: /etc/postfix/ldap.distlist
Multifile: /etc/postfix/ldap.groups
Multifile: /etc/postfix/ldap.sharedfolderlocal
File: /etc/dhcp/dhcpd.conf
Multifile: /etc/postfix/ldap.virtualwithcanonical
Multifile: /etc/postfix/ldap.sharedfolderremote
Multifile: /etc/postfix/ldap.canonicalsender
File: /etc/ldap/ldap.conf
Setting ldap/master/port
File: /etc/ntp.conf
Multifile: /etc/ldap/slapd.conf
File: /etc/default/ntpdate
File: /etc/nagios/nrpe.cfg
Restarting ldap server(s).
Stopping ldap server(s): slapd …done.
Check database: …done.
Starting ldap server(s): slapd …done.
Checking Schema ID: …done.
Restarting univention-directory-listener daemon.
ok: run: univention-directory-listener: (pid 32465) 0s, normally down
done.
Restarting Univention Management Console Server.
done.
Create windows/wins-support
Create windows/wins-server
Multifile: /etc/samba/smb.conf
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
WARNING: /etc/krb5.keytab not created.
restore_rIDNextRID: Attribute rIDSetReferences not found
ERROR(runtime): uncaught exception - samdb_domain_sid failed
File “/usr/lib/python2.7/dist-packages/samba/netcmd/init.py”, line 175, in _run
return self.run(*args, **kwargs)
File “/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py”, line 189, in run
domain_sid = security.dom_sid(samdb.domain_sid)
File “/usr/lib/python2.7/dist-packages/samba/samdb.py”, line 642, in get_domain_sid
return dsdb._samdb_get_domain_sid(self)
Samba4 does not seem to be provisioned, exiting /usr/share/univention-samba4/scripts/setup-dns-in-ucsldap.sh
bdc.firma.at port 88 is not offering the Service ‘Samba 4’
Object modified: relativeDomainName=_kerberos._tcp,zoneName=firma.at,cn=dns,dc=firma,dc=at
bdc.firma.at port 88 is not offering the Service ‘Samba 4’
Object modified: relativeDomainName=_kerberos._udp,zoneName=firma.at,cn=dns,dc=firma,dc=at
pdc.firma.at port 7389 is not offering the Service ‘Samba 4’
Object modified: relativeDomainName=_ldap._tcp,zoneName=firma.at,cn=dns,dc=firma,dc=at
bdc.firma.at port 7389 is not offering the Service ‘Samba 4’
Information provided is not sufficient.
ERR: (No such object) “ldb_wait: No such object (32)” on DN CN=pdc,OU=Domain Controllers,DC=FIRMA,DC=AT at block before line 7
Modify failed after processing 0 records
[ ok ] Starting NetBIOS name server: nmbd.
Samba is configured as AD DC, service smbd is controlled by the main samba daemon.
[ ok ] Starting Samba AD DC daemon: samba.
Create samba4/sysvol/sync/cron
File: /etc/cron.d/sysvol-sync
Multifile: /etc/samba/smb.conf
Object modified: zoneName=firma.at,cn=dns,dc=firma,dc=at
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
/etc/krb5.keytab does not exist yet, triggering samba4 commit.
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
rm: Entfernen von „/etc/krb5.keytab“ nicht möglich: Datei oder Verzeichnis nicht gefunden
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
WARNING: /etc/krb5.keytab not created.
Object exists: cn=pdc.firma.at,cn=shares,dc=firma,dc=at
No modification: cn=pdc.firma.at,cn=shares,dc=firma,dc=at
/etc/krb5.keytab does not exist after initial samba4 start, re-triggering samba4 commit.
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
rm: Entfernen von „/etc/krb5.keytab“ nicht möglich: Datei oder Verzeichnis nicht gefunden
ERR: (No such object) “ldb_wait: No such object (32)” on DN flatname=FIRMA,cn=Primary Domains at block before line 5
Modify failed after processing 0 records
WARNING: /etc/krb5.keytab not created.
[ ok ] Stopping NetBIOS name server: nmbd.
[ ok ] Starting NetBIOS name server: nmbd.
Samba is configured as AD DC, service smbd is controlled by the main samba daemon.
[ ok ] Stopping Samba AD DC daemon: samba.
[ ok ] Starting Samba AD DC daemon: samba.
WARNING: Failed to search for S4 connector DC
Object exists: cn=services,cn=univention,dc=firma,dc=at
Object created: cn=Samba 4,cn=services,cn=univention,dc=firma,dc=at
Object modified: cn=pdc,cn=dc,cn=computers,dc=firma,dc=at
2016-02-05 11:11:44.735958578+01:00 (in joinscript_save_current_version)
Joinscript 96univention-samba4.inst finished with exitcode 0
Trigger für univention-config werden verarbeitet …
dpkg-query: Kein Paket gefunden, das auf ldapacl_66univention-appcenter_app.acl passt
univention-s4-connector (10.0.1-10.604.201601201402) wird eingerichtet …
Neue Version der Konfigurationsdatei /etc/univention/connector/s4/mapping wird installiert …
Neue Version der Konfigurationsdatei /etc/univention/registry.info/variables/univention-s4-connector.cfg wird installiert …
File: /etc/logrotate.d/univention-s4-connector
Create connector/s4/listener/dir
Create connector/s4/poll/sleep
Create connector/s4/retryrejected
Create connector/s4/ldap/port
Create connector/s4/ldap/ssl
Create connector/debug/function
Create connector/debug/level
Not updating connector/ad/mapping/group/language
Create connector/s4/mapping/syncmode
Create connector/s4/mapping/sid
Create connector/s4/mapping/gpo
Create connector/s4/mapping/user/ignorelist
Not updating connector/s4/mapping/group/grouptype
Create connector/s4/mapping/group/ignorelist
Not updating connector/s4/mapping/group/table/Printer-Admins
Create connector/s4/mapping/container/ignorelist
Create connector/s4/mapping/dns/ignorelist
[info] Restarting univention-directory-listener daemon.
timeout: run: univention-directory-listener: (pid 32465) 34s, normally down, got TERM
done.
Calling joinscript 97univention-s4-connector.inst …
2016-02-05 11:11:55.183742172+01:00 (in joinscript_init)
Create connector/s4/ldap/host
Create connector/s4/ldap/base
Not updating connector/s4/ldap/ssl
Create connector/s4/mapping/group/language
Create connector/s4/ldap/protocol
Create connector/s4/ldap/socket
Object exists: cn=gPLink,cn=custom attributes,cn=univention,dc=firma,dc=at
Object exists: cn=Builtin,dc=firma,dc=at
Object exists: cn=System,dc=firma,dc=at
Object exists: cn=Policies,cn=System,dc=firma,dc=at
Object exists: ou=Domain Controllers,dc=firma,dc=at
Object exists: cn=WMIPolicy,cn=System,dc=firma,dc=at
Object exists: cn=SOM,cn=WMIPolicy,cn=System,dc=firma,dc=at
Object exists: cn=ldapschema,cn=univention,dc=firma,dc=at
INFO: No change of core data of object msgpo.
Object modified: cn=msgpo,cn=ldapschema,cn=univention,dc=firma,dc=at

INFO: No change of core data of object mswmi.
Object modified: cn=mswmi,cn=ldapschema,cn=univention,dc=firma,dc=at

Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
INFO: No change of core data of object container/msgpo.
Object modified: cn=container/msgpo,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object msgpo: OK
Waiting for activation of the extension object mswmi: OK
Waiting for activation of the extension object container/msgpo: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/container/msgpo.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
INFO: No change of core data of object settings/mswmifilter.
Object modified: cn=settings/mswmifilter,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object settings/mswmifilter: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/mswmifilter.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=ldapschema,cn=univention,dc=firma,dc=at
Object created: cn=msprintconnectionpolicy,cn=ldapschema,cn=univention,dc=firma,dc=at

Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
Object created: cn=settings/msprintconnectionpolicy,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object msprintconnectionpolicy:…OK
Waiting for activation of the extension object settings/msprintconnectionpolicy: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/msprintconnectionpolicy.py: OK
Terminating running univention-cli-server processes.
Samba4 does not seem to be provisioned, exiting /usr/lib/univention-install/97univention-s4-connector.inst
Joinscript 97univention-s4-connector.inst finished with exitcode 1
[info] Stopping univention-s4-connector daemon.
failed.
[info] Starting univention-s4-connector daemon.
done.
Trigger für python-support werden verarbeitet …
root@pdc:~/siedl#
root@pdc:~/siedl#
root@pdc:~/siedl#
root@pdc:~/siedl#
root@pdc:~/siedl# tail -f /var/log/univention/join.log
Checking Schema ID: …done.
Object exists: cn=services,cn=univention,dc=firma,dc=at
Object created: cn=Univention Management Console,cn=services,cn=univention,dc=firma,dc=at
Object modified: cn=pdc,cn=dc,cn=computers,dc=firma,dc=at
2016-02-05 10:52:40.602185097+01:00 (in joinscript_save_current_version)
EXITCODE=0

Fr 5. Feb 10:52:40 CET 2016
univention-run-join-scripts finished

univention-run-join-scripts started
Fr 5. Feb 11:14:11 CET 2016

RUNNING 97univention-s4-connector.inst
2016-02-05 11:14:11.290050712+01:00 (in joinscript_init)
Not updating connector/s4/ldap/host
Not updating connector/s4/ldap/base
Not updating connector/s4/ldap/ssl
Not updating connector/s4/mapping/group/language
Not updating connector/s4/ldap/protocol
Not updating connector/s4/ldap/socket
Object exists: cn=gPLink,cn=custom attributes,cn=univention,dc=firma,dc=at
Object exists: cn=Builtin,dc=firma,dc=at
Object exists: cn=System,dc=firma,dc=at
Object exists: cn=Policies,cn=System,dc=firma,dc=at
Object exists: ou=Domain Controllers,dc=firma,dc=at
Object exists: cn=WMIPolicy,cn=System,dc=firma,dc=at
Object exists: cn=SOM,cn=WMIPolicy,cn=System,dc=firma,dc=at
Object exists: cn=ldapschema,cn=univention,dc=firma,dc=at
INFO: No change of core data of object msgpo.
INFO: No change of core data of object mswmi.
Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
INFO: No change of core data of object container/msgpo.
No modification: cn=msgpo,cn=ldapschema,cn=univention,dc=firma,dc=at

No modification: cn=mswmi,cn=ldapschema,cn=univention,dc=firma,dc=at

No modification: cn=container/msgpo,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object msgpo: OK
Waiting for activation of the extension object mswmi: OK
Waiting for activation of the extension object container/msgpo: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/container/msgpo.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
INFO: No change of core data of object settings/mswmifilter.
No modification: cn=settings/mswmifilter,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object settings/mswmifilter: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/mswmifilter.py: OK
Terminating running univention-cli-server processes.
Object exists: cn=ldapschema,cn=univention,dc=firma,dc=at
INFO: No change of core data of object msprintconnectionpolicy.
Object exists: cn=udm_module,cn=univention,dc=firma,dc=at
INFO: No change of core data of object settings/msprintconnectionpolicy.
No modification: cn=msprintconnectionpolicy,cn=ldapschema,cn=univention,dc=firma,dc=at

No modification: cn=settings/msprintconnectionpolicy,cn=udm_module,cn=univention,dc=firma,dc=at

Waiting for activation of the extension object msprintconnectionpolicy: OK
Waiting for activation of the extension object settings/msprintconnectionpolicy: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/settings/msprintconnectionpolicy.py: OK
Terminating running univention-cli-server processes.
Samba4 does not seem to be provisioned, exiting /usr/lib/univention-install/97univention-s4-connector.inst
EXITCODE=1
RUNNING 98univention-samba4-dns.inst
2016-02-05 11:14:18.341712818+01:00 (in joinscript_init)
Samba4 backend database not available yet, exiting joinscript 98univention-samba4-dns.
EXITCODE=1

Fr 5. Feb 11:14:18 CET 2016
univention-run-join-scripts finished[/code]

Moin,

hmm… das Python-Upgrade-Script besorgt sich den Pfad zum privaten Verzeichnis aus der Samba-Konfiguration, wenn ich den Code hier richtig lese. Warum das bei Ihnen nun /var/lib/samba3 ist, ist eine gute Frage. So ganz bin ich durch den ganzen Code des Upgrades nicht durchgestiegen.

Ich kann mir in der Tat aber gut vorstellen, dass sich beim Upgrade auf v4 schlicht irgendwo etwas geändert hat, das so nicht unbedingt hätte sein sollen. Vielleicht probieren Sie den ganzen Vorgang erneut, aber aktualisieren zuerst nur auf die letzte 3.2. Dann die Migration auf Samba 4. Klappt die, dann schließend das Upgrade auf UCS 4.1.

Gruß,
mosu

Danke, das werde ich ausprobieren!

Mit dieser Methode hat es funktioniert.
Also zuerst auf 3.2.8., dann die Samba-Migration nach der Best-Practice-Anleitung im UCS-Wiki und schließlich das Update auf 4.1.1.

Nun habe ich das Phänomen, dass bei den meisten Usern das Passwort nicht mehr funktioniert - aber nicht bei allen!
Kerberos-Tickets bzw. Windows-Logins über einen neu gejointen Rechner sind für die meisten User nicht möglich.

Nach einer Passwort-Änderung funktioniert es.

Woran könnte das liegen?

Moin,

keine Ahnung. Ich würde das pragmatisch angehen und für alle User forçiert neue Passwörter vergeben (gescriptet via »udm users/user modify…«).

Gruß,
mosu

Ja, hab ich mir auch schon überlegt.
Es ist nur eine Test-Umgebung, daher will der Kunde evtl. eine Fehleranalyse, um dieses Problem bei der Produktiv-Migration nicht mehr zu sehen.
Sehr tragisch ist das Problem aber nicht, das stimmt schon. (jedenfalls aus meiner Sicht) :wink:

Mir ist inzwischen aufgefallen, dass der nameserver1 falsch eingestellt war und daher auch die ganzen essentiellen DNS-Einträge nicht funktioniert haben.
Das habe ich nun korrigiert und warte auf den Test von Kundenseite. (ich kenne kein Passwort vor der Umstellung - ausser dem Admin-Kennwort natürlich. Aber beim Admin hat es auch auf Anhieb geklappt)

Mastodon