Neuen Benutzer anlegen funktioniert nicht (mehr)

versdirekt · April 4, 2014, 9:59am

Hallo, schlage mich derzeit mit dem Problem rum, das ich auf der UMC problemlos einen neuen Benutzer anlegen kann, bei der erstmaligen Anmeldung über eine Windows 7 Workstation hartnäckig die Meldung bekomme:

der Benutzername bzw. das Kennwort sind falsch

Wenn ich mich auf der Workstation erstmalig mit einem bestehenden Benutzer (mit vorhandenem Profil) anmelde funktioniert alles.
Melde ich mich mit dem neuen Benutzer (der sich noch nie angemeldet war) an, geht es eben nicht (habe zuletzt sehr einfache Benutzer / Passwortkombi gewählt um die Möglichkeit einer Fehleingabe auszuschließen :-).

Unsere Profile liegen auf einem Share “/profile” welches über die UMC eingegenben werden muss.

Die Logdateien geben sehr spärliche Meldungen aus. Gesucht habe ich unter /var/log sowie unter /var/log/samba. Hier habe ich in der log.smbd die folgende Fehlermelung rausgefischt:

receive_smb_raw_talloc failed for client ipv4:192.168.100.168:57986 read error = NT_STATUS_CONNECTION_RESET.

Herr Google konnte mir keine Hinweise geben. Die IP Adresse *.168 ist die Workstation mit der ich es probiert habe. Selbstverständlich habe ich auch von anderen Workstation aus versucht mich anzumelden. Leider mit gleicher Fehlermeldung.

Wir laufen unter UCS 3.2 mit Samba4. Wer kann mir einen Tipp geben?

Mit freundlichen Grüßen

VERSDIREKT GmbH
Volker Hahn

versdirekt · April 8, 2014, 12:56pm

Leider kann ich auch keine neuen Maschinen mehr anlegen. Das Logfile /var/log/log.samba haut die folgenden Meldung raus:

[2014/04/08 12:40:04.968559, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:40:08.516521, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn[Bug][/Bug] [2014/04/08 12:40:12.538674, 0, pid=1754] ../source4/dsdb/common/util_samr.c:192(dsdb_add_user) Failed to create user record CN=SILVERWIM,CN=Computers,DC=gilching,DC=local: Failed to find fSMORoleOwner in RID Manager object - (null) [2014/04/08 12:44:09.559239, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:09.559364, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:09.666703, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:09.666769, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:18.597006, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:18.597121, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:43.038328, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:43.038397, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:43.039781, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:43.039826, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.838875, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.838975, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.944805, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.944875, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.946472, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:51.946519, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.542115, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.542187, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.651339, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.651411, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.653542, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:44:59.653658, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:45:08.520184, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 12:50:08.524952, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 12:51:22.211743, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:51:22.211838, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:55:08.534985, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 12:55:15.425457, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:55:15.425512, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:56:58.473096, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 12:56:58.473226, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:00:08.545719, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:05:08.551963, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:08:57.054118, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:08:57.054195, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:10:08.557787, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:15:08.564108, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:17:56.102089, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:17:56.102208, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:17:56.710252, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:17:56.710315, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:18:01.260110, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:18:01.260181, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:20:08.568736, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:23:10.405112, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:23:10.405166, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:25:08.574419, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:30:08.579439, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:08.583611, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:33.240468, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:33.240536, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:50.799844, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:50.799946, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:50.914007, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:50.914065, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:59.530471, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:35:59.530539, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:36:01.543002, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:36:01.543065, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:36:01.727353, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:36:01.727440, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:36:09.964391, 0, pid=1754] ../source4/dsdb/common/util_samr.c:192(dsdb_add_user) Failed to create user record CN=SHUTTLE-SCANNER,CN=Computers,DC=gilching,DC=local: Failed to find fSMORoleOwner in RID Manager object - (null) [2014/04/08 13:40:08.587333, 0, pid=1760] ../source4/dsdb/repl/drepl_ridalloc.c:207(dreplsrv_ridalloc_check_rid_pool) ../source4/dsdb/repl/drepl_ridalloc.c:207: Failed to find fSMORoleOwner in RID Manager object - Cannot find attribute fSMORoleOwner of CN=RID Manager$,CN=System,DC=gilching,DC=local to calculate reference dn [2014/04/08 13:43:47.789560, 0, pid=1758] ../source4/dsdb/common/util.c:1662(samdb_reference_dn_is_our_ntdsa) Failed to find object DC=gilching,DC=local for attribute fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn [2014/04/08 13:43:47.789648, 1, pid=1758] ../source4/dsdb/common/util.c:1846(samdb_is_pdc) Failed to find if we are the PDC for this ldb: Searching for fSMORoleOwner in DC=gilching,DC=local failed: Cannot find attribute fsmoRoleOwner of DC=gilching,DC=local to calculate reference dn

wir laufen unter Samba 4.1:

root@ucsmaster:~# root@ucsmaster:~# samba -V Version 4.1.0-Debian root@ucsmaster:~#

Einer der neuen Rechner heißt z. B.: SHUTTLE-SCANNER. Die Fehlerzeile habe ich hier rausgepickt:

[2014/04/08 13:36:09.964391, 0, pid=1754] ../source4/dsdb/common/util_samr.c:192(dsdb_add_user) Failed to create user record CN=SHUTTLE-SCANNER,CN=Computers,DC=gilching,DC=local: Failed to find fSMORoleOwner in RID Manager object - (null)

Dem Hinweis mit dem RID Manager bin ich dann gefolgt und habe folgenden Fix ausprobiert:

http://sdb.univention.de/content/6/246/de/samba-4-_-rid_pool-erneuern.html

Leider ohne Erfolg. Der Versuch einen neuen User it den Samba tool anzlegen erzeugt die folgende Fehlermeldung:

................ security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/personal" Processing section "[personal]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" pm_process() returned Yes ERROR(ldb): Failed to add user 'testbenutzer2': - NO RID values available: Failed to find fSMORoleOwner in RID Manager object - (null) File "/usr/lib/python2.6/dist-packages/samba/netcmd/user.py", line 183, in run uid=uid, uidnumber=uid_number, gidnumber=gid_number, gecos=gecos, loginshell=login_shell) File "/usr/lib/python2.6/dist-packages/samba/samdb.py", line 422, in newuser self.add(ldbmessage) root@ucsmaster:~#

Seit einem der letzten Univention Update muss (unsere) die Samba 4 Konfiguration fehlerhaft sein. Ich bitte um Unterstützung!

Gruß Hahn

Gohmann · April 9, 2014, 4:50am

Das habe ich so noch nicht gesehen. Ich würde mal anfangen die Einstellungen via

samba-tool dbcheck --cross-ncs zu prüfen und anschließend mit

samba-tool dbcheck --cross-ncs --fix die gemeldeten Fehler zu beheben. Ggf. auch noch mit

samba-tool fsmo show die FSMO Rollen prüfen.

versdirekt · April 9, 2014, 7:37am

Hallo Herr Gohmann,

leider hat die Fehlerbehebung mit

samba-tool dbcheck --cross-ncs --fix

nicht funktioniert.

Hier kommen die Meldungen:
dbcheck:

[code]Last login: Mon Apr 7 15:31:20 on ttys000
hahns-iMac-3:~ hahn$ ssh root@192.168.100.110
Password:
Univention DC Master 3.2-1:

The UCS management system is available at https://ucsmaster.gilching.local/ (192.168.100.110)

You can log into the Univention Management Console - the principal tool to manage
users, groups, etc. - using the “Administrator” account and the password selected
for the root user on the master domain controller.

Last login: Tue Apr 8 13:37:43 2014 from 192.168.100.149
root@ucsmaster:~# samba-tool dbcheck --cross-ncs
params.c:pm_process() - Processing configuration file “/etc/samba/base.conf”
Processing section “[netlogon]”
Processing section “[sysvol]”
Unknown parameter encountered: “acl xattr update mtime”
Ignoring unknown parameter “acl xattr update mtime”
Processing section “[IPC$]”
Processing section “[homes]”
Processing section “[printers]”
Processing section “[print$]”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/2open”
Processing section “[2open]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/umg_ordner”
Processing section “[umg_ordner]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/pvs_vergleich”
Processing section “[pvs_vergleich]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/install”
Processing section “[install]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/dokumente”
Processing section “[dokumente]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/entwicklung”
Processing section “[entwicklung]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/www-dev”
Processing section “[www-dev]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/profile”
Processing section “[profile]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/statistik”
Processing section “[statistik]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
params.c:pm_process() - Processing configuration file “/etc/samba/shares.conf.d/personal”
Processing section “[personal]”
Unknown parameter encountered: “security mask”
Ignoring unknown parameter “security mask”
Unknown parameter encountered: “directory security mask”
Ignoring unknown parameter “directory security mask”
Unknown parameter encountered: “force security mode”
Ignoring unknown parameter “force security mode”
Unknown parameter encountered: “force directory security mode”
Ignoring unknown parameter “force directory security mode”
pm_process() returned Yes
Checking 4145 objects
ERROR: fSMORoleOwner not found for role CN=Schema,CN=Configuration,DC=gilching,DC=local
Not Siezing role CN=Schema,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local
ERROR: fSMORoleOwner not found for role CN=Partitions,CN=Configuration,DC=gilching,DC=local
Not Siezing role CN=Partitions,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local
ERROR: fSMORoleOwner not found for role CN=Infrastructure,DC=gilching,DC=local
Not Siezing role CN=Infrastructure,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local
ERROR: fSMORoleOwner not found for role CN=RID Manager$,CN=System,DC=gilching,DC=local
Not Siezing role CN=RID Manager$,CN=System,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local
Please use --fix to fix these errors
Checked 4145 objects (4 errors)
root@ucsmaster:~# [/code]

dann der Versuch mit der “–fix” Option:

oot@ucsmaster:~# samba-tool dbcheck --cross-ncs --fix params.c:pm_process() - Processing configuration file "/etc/samba/base.conf" Processing section "[netlogon]" Processing section "[sysvol]" Unknown parameter encountered: "acl xattr update mtime" Ignoring unknown parameter "acl xattr update mtime" Processing section "[IPC$]" Processing section "[homes]" Processing section "[printers]" Processing section "[print$]" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/2open" Processing section "[2open]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/umg_ordner" Processing section "[umg_ordner]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/pvs_vergleich" Processing section "[pvs_vergleich]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/install" Processing section "[install]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/dokumente" Processing section "[dokumente]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/entwicklung" Processing section "[entwicklung]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/www-dev" Processing section "[www-dev]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/profile" Processing section "[profile]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/statistik" Processing section "[statistik]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/personal" Processing section "[personal]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" pm_process() returned Yes Checking 4145 objects ERROR: fSMORoleOwner not found for role CN=Schema,CN=Configuration,DC=gilching,DC=local Sieze role CN=Schema,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local [y/N/all/none] y Failed to sieze role CN=Schema,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local : (20, 'SINGLE-VALUE attribute fSMORoleOwner on CN=Schema,CN=Configuration,DC=gilching,DC=local specified more than once') ERROR: fSMORoleOwner not found for role CN=Partitions,CN=Configuration,DC=gilching,DC=local Sieze role CN=Partitions,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local [y/N/all/none] y Failed to sieze role CN=Partitions,CN=Configuration,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local : (20, 'SINGLE-VALUE attribute fSMORoleOwner on CN=Partitions,CN=Configuration,DC=gilching,DC=local specified more than once') ERROR: fSMORoleOwner not found for role CN=Infrastructure,DC=gilching,DC=local Sieze role CN=Infrastructure,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local [y/N/all/none] y Failed to sieze role CN=Infrastructure,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local : (20, 'SINGLE-VALUE attribute fSMORoleOwner on CN=Infrastructure,DC=gilching,DC=local specified more than once') ERROR: fSMORoleOwner not found for role CN=RID Manager$,CN=System,DC=gilching,DC=local Sieze role CN=RID Manager$,CN=System,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local [y/N/all/none] y Failed to sieze role CN=RID Manager$,CN=System,DC=gilching,DC=local onto current DC by adding fSMORoleOwner=CN=NTDS Settings,CN=UCSMASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=gilching,DC=local : (20, 'SINGLE-VALUE attribute fSMORoleOwner on CN=RID Manager$,CN=System,DC=gilching,DC=local specified more than once') Checked 4145 objects (4 errors)

Die vier Fehler bleiben. Sodann noch die FSMO Rollen Prüfung. (Hier kommt zuletzt ein Hinweis):

root@ucsmaster:~# samba-tool fsmo show params.c:pm_process() - Processing configuration file "/etc/samba/base.conf" Processing section "[netlogon]" Processing section "[sysvol]" Unknown parameter encountered: "acl xattr update mtime" Ignoring unknown parameter "acl xattr update mtime" Processing section "[IPC$]" Processing section "[homes]" Processing section "[printers]" Processing section "[print$]" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/2open" Processing section "[2open]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/umg_ordner" Processing section "[umg_ordner]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/pvs_vergleich" Processing section "[pvs_vergleich]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/install" Processing section "[install]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/dokumente" Processing section "[dokumente]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/entwicklung" Processing section "[entwicklung]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/www-dev" Processing section "[www-dev]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/profile" Processing section "[profile]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/statistik" Processing section "[statistik]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf.d/personal" Processing section "[personal]" Unknown parameter encountered: "security mask" Ignoring unknown parameter "security mask" Unknown parameter encountered: "directory security mask" Ignoring unknown parameter "directory security mask" Unknown parameter encountered: "force security mode" Ignoring unknown parameter "force security mode" Unknown parameter encountered: "force directory security mode" Ignoring unknown parameter "force directory security mode" pm_process() returned Yes ldb_wrap open of secrets.ldb ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/lib/python2.6/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib/python2.6/dist-packages/samba/netcmd/fsmo.py", line 197, in run self.infrastructureMaster = res[0]["fSMORoleOwner"][0] root@ucsmaster:~#
Schon jetzt ein Dankeschön für rasche Unterstützung …

Gohmann · April 10, 2014, 5:26am

Dann scheinen irgendwelche Daten im Samba 4 Verzeichnisdienst nicht zu stimmen. Eine umfangreiche Analyse wird über diesen Kanal aber nicht möglich sein. Vielleicht wäre das Re-Provisionieren des Masters für Sie die einfachste Möglichkeit:
sdb.univention.de/1266

Der Artikel ist neu und noch nicht für alle Umgebungen und Szenarien getestet. Am besten zunächst in einer Testumgebung testen, ob es so für Sie funktioniert.

versdirekt · April 11, 2014, 8:06pm

Guten Abend Herr Gohmann,

das “Re-Provisionieren” war in sofern zielführend, als dass wir wieder neue Nutzer anlegen können. Es war noch notwendig, mit den Samba-tools [quote=“Gohmann”]samba-tool dbcheck --cross-ncs --fix[/quote] die Fehler zu entfernen. Auch das [quote=“Gohmann”]samba-tool fsmo show[/quote] zeigt keine Fehler mehr auf.

ABER:
Das Anmelden neuer Maschinen geht immer noch nicht. Jetzt mit der Windows Fehlermeldung: [quote]Zuordnungen von Kontennamen und Sicherheitskennungen wurden nicht durchgeführt[/quote].

Die Datei /var/log/samba/log.samba kommt auch mit einer neuen Meldung:root@ucsmaster:/var/log/samba# grep -i 'macos_windows' log.samba Failed to create user record CN=MACOS_WINDOWS,CN=Computers,DC=gilching,DC=local: ../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=MACOS_WINDOWS,CN=Computers,DC=gilching,DC=local - ../ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=MACOS_WINDOWS,CN=Computers,DC=gilching,DC?root@ucsmaster:/var/log/samba# grep -i 'silverwim' log.samba Failed to create user record CN=SILVERWIM,CN=Computers,DC=gilching,DC=local: ../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=SILVERWIM,CN=Computers,DC=gilching,DC=local - ../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=SILVERWIM,CN=Computers,DC=gilching,DC=local - ../l root@ucsmaster:/var/log/samba#

Um die Log Datei nich mit alten Fehlermeldungen zu verwässern habe ich diese nach der re-Provisinoierung gelöscht und neu angelegt. Die Worstation heißen “Silverwim” und “macos_windows”

Wie baut man den Index neu auf?

Petersen · April 23, 2014, 5:06am

Hallo,

zum Neuaufbau bzw. Anpassung der RID-Pools gibt es SDB-Artikel #1260 - Samba 4 - RID-Pool erneuern
Die von Ihnen referenzierte Meldung in Verbindung mit der Verhaltensbeschreibung deuten relativ klar darauf hin, dass es Probleme mit bestehenden Pools gibt - das Bereinigen ist notwendiger Teil der Re-Provisionierung (“10. Anpassen des neu erzeugten RID-Pools”).

Mit freundlichen Grüßen,
Tim Petersen

versdirekt · May 7, 2014, 9:30am

Hallo Herr Petersen,

nachdem ich jetzt insgesamt 3 mal den RID-Pool erneuert habe scheint es jetzt dauerhaft zu funktionieren. Ich konnte hintereinander 5 neue Objekte (Rechner und User) an der Domäne anmelden. Besten Dank für die Unterstützung.

MFG Hahn
VERSDIREKT GmbH