Forum IT Tranquillo

Contattaci
su https://forum.tranquil.it/

Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

https://forum.tranquil.it/viewtopic.php?t=898

Pagina 1 di 1

Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 27 dicembre 2017 - 17:55
di eckeagle
Buongiorno

Ho un dominio Active Directory in esecuzione su Windows Server 2012 R2, quindi il livello funzionale della foresta è su Windows Server 2008 e il livello funzionale del dominio è su Windows Server 2008 R2

Ho seguito il tuo tutorial https://dev.tranquil.it/wiki/SAMBA_-_In ... secondario Per aggiungere un controller di dominio Debian 9 Samba 4 al momento dell'iscrizione, mi vengono forniti i seguenti dati:

Codice: Seleziona tutto

Adding 1 remote DNS records for ECKBADEB.kenneagle.lan
Adding DNS A record ECKBADEB.kenneagle.lan for IPv4 IP: 192.168.100.3
Join failed - cleaning up
Deleted CN=RID Set,CN=ECKBADEB,OU=Domain Controllers,DC=kenneagle,DC=lan
Deleted CN=ECKBADEB,OU=Domain Controllers,DC=kenneagle,DC=lan
Deleted CN=NTDS Settings,CN=ECKBADEB,CN=Servers,CN=Premier-Site-par-defaut,CN=Sites,CN=Configuration,DC=kenneagle,DC=lan
Deleted CN=ECKBADEB,CN=Servers,CN=Premier-Site-par-defaut,CN=Sites,CN=Configuration,DC=kenneagle,DC=lan
ERROR(runtime): uncaught exception - (9003, 'WERR_DNS_ERROR_RCODE_NAME_ERROR')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 661, in run
    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1474, in join_DC
    ctx.do_join()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1384, in do_join
    ctx.join_add_dns_records()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1116, in join_add_dns_records
    dns_partition=domaindns_zone_dn)
  File "/usr/lib/python2.7/dist-packages/samba/samdb.py", line 939, in dns_lookup
    dns_partition=dns_partition)
Puoi aiutarmi? Grazie in anticipo

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 28 dicembre 2017 - 12:12
di eckeagle
Buongiorno

Dopo aver ripetuto i test, sono riuscito a connettere il mio controller di dominio Samba4 al mio dominio Active Directory esistente

La directory è replicata correttamente, ma non DNS e sysvol:
per dns

Codice: Seleziona tutto

root@eckbadeb:/home/nicoket# samba_dnsupdate --use-samba-tool --rpc-server-ip=192.168.1.78
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
ERROR(runtime): uncaught exception - (-1073741790, '{Access Denied} A process has requested access to an object but has not been granted those access rights.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 935, in run
    0, server, zone, name, add_rec_buf, None)
Failed update of 24 entries

Codice: Seleziona tutto

samba-tool ntacl sysvolcheck ERROR(<type 'exceptions.TypeError'>): uncaught exception - (2, 'No such file or directory')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py", line 270, in run
    lp)
  File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1723, in checksysvolacl
    direct_db_access)
  File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1659, in check_gpos_acl
    direct_db_access=direct_db_access, service=SYSVOL_SERVICE)
  File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 81, in getntacl
    xattr.XATTR_NTACL_NAME)

Codice: Seleziona tutto

root@eckbadeb:/home/nicoket# samba-tool ntacl sysvolresetopen: error=2 (No such file or directory)
ERROR(runtime): uncaught exception - (-1073741823, '{Operation Failed} The requested operation was unsuccessful.')
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py", line 239, in run
    lp, use_ntvfs=use_ntvfs)
  File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1609, in setsysvolacl
    set_gpos_acl(sysvol, dnsdomain, domainsid, domaindn, samdb, lp, use_ntvfs, passdb=s4_passdb)
  File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1502, in set_gpos_acl
    use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb, service=SYSVOL_SERVICE)
  File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 162, in setntacl
    smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd, service=service)
Qualcuno ha qualche idea?

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 29 dicembre 2017 - 11:45
di sfontenau
La parte relativa a sysvol è normale.

https://dev.tranquil.it/wiki/SAMBA_-_R% ... age_SYSVOL

Con una soluzione Syncthing sia su Windows che su Linux, è certamente fattibile, ma richiederà alcuni adattamenti!

Per quanto riguarda il DNS, potresti specificare l'indirizzo IP di Active Directory di Windows e del server Samba 4?

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 2 gennaio 2018 - 17:57
di eckeagle
Salve,

grazie per la risposta.

Il problema con sysvol è stato compreso e risolto.

Per quanto riguarda il DNS,

il mio server Windows ha indirizzo IP 192.168.1.78 e
il mio server Linux ha indirizzo IP 192.168.100.3.

Dopo ulteriori test, ho ricostruito completamente il server.
La connessione funziona solo se è selezionata l'opzione "A tutti i server in esecuzione sui controller di dominio in questo dominio: mydomain.lan". Si tratta di un problema del server?
La sincronizzazione DNS continua a non funzionare.

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 15 gennaio 2018 - 13:21
di dcardon
eckeagle ha scritto: ↑27 dic 2017 - 17:55 Ciao,

ho un dominio AD in esecuzione su Windows Server 2012 R2, quindi il livello funzionale della foresta è su Windows Server 2008 e il livello funzionale del dominio è su Windows Server 2008 R2.

Ho seguito il tuo tutorial https://dev.tranquil.it/wiki/SAMBA_-_In ... secondary per aggiungere un DC Samba4 Debian 9, ma durante il processo di join, ottengo questi risultati:
Sebbene il livello di foresta sia 2k8r2, il server Win2k12 aggiunge funzionalità specifiche che non sono compatibili con Samba-AD (almeno questo era vero 5-6 mesi fa). Sono stati pubblicati dei commit sulla mailing list per risolvere questo problema e aggiungere il supporto per gli schemi 2k12 (mi riferisco agli schemi, non alle funzioni silo, FAST, ecc.).
È meglio effettuare il test con win2k8r2 oppure attendere Samba 4.8 che probabilmente dovrebbe includere questi miglioramenti.

Denis

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 15 gennaio 2018 - 13:27
di dcardon
eckeagle ha scritto: ↑2 gennaio 2018 - 17:57 Per il DNS,

il mio server Windows è su IP 192.168.1.78
e il mio server Linux è su IP 192.168.100.3.

Dopo ulteriori test, ho ricostruito completamente il server.
La connessione funziona solo se è selezionata l'opzione "a tutti i server in esecuzione sui controller di dominio in questo dominio: mydomain.lan". Problema del server???
E la sincronizzazione DNS continua a non funzionare.
Ho appena aggiunto un Active Directory Windows Server 2008 R2 al mio dominio Samba-AD con versione 4.7.4. Ho un problema con la replica delle zone DNS (in effetti, il KCC non ha nemmeno creato i record `repsfrom` e `repsto` corrispondenti). Deve trattarsi di una regressione, oppure c'è qualcosa che non va nelle mie partizioni `DC=DomainDNSZones` e `DC=ForestDNSZones`. Le altre partizioni funzionano correttamente... Ha funzionato in passato, anche se i domini misti Samba/MS non sono consigliati. Ci darò un'altra occhiata questo pomeriggio, se avrò tempo.

Denis

Re: Problema durante l'installazione di dcsamba4 su un dominio Windows AD esistente

Pubblicato: 15 gennaio 2018 - 23:19
di eckeagle
Stavo iniziando a sospettare che provenisse da Network Manager. Sì, ho installato l'interfaccia GNOME, ma non so cosa consigliarti
Fuso orario impostato su UTC+02:00
Pagina 1 di 1

Sviluppato da phpBB® Forum Software © phpBB Limited

Traduzione ufficiale francese © Qiaeru