{"id":2067,"date":"2022-01-13T12:28:15","date_gmt":"2022-01-13T11:28:15","guid":{"rendered":"http:\/\/clark.tipistrani.it\/?p=2067"},"modified":"2023-01-02T08:27:41","modified_gmt":"2023-01-02T07:27:41","slug":"samba-4-15-3-su-devuan-chimaera-ad-dc","status":"publish","type":"post","link":"https:\/\/clark.tipistrani.it\/?p=2067","title":{"rendered":"Samba 4.15.3 su Devuan chimaera AD DC"},"content":{"rendered":"<p>In questi giorni sto facendo il test per vedere come fare per cambiare samba sui server nuovi che installeremo il prossimo anno.<br \/>\nSino al 2019 non mi preoccupavo pi\u00f9 di tanto, siamo 44 gatti in ditta, quindi ad ogni cambio server e di conseguenza di versione SO e samba rigeneravo tutti gli utenti e i gruppi copiando pari pari le impostazioni dal vecchio server e buona notte ai suonatori.<br \/>\nPoi \u00e8 arrivato Dynamics NAV in ditta come gestionale e li son cominciati i problemi, infatti il maledetto si mette da qualche parte il SID di ogni utente autorizzato all&#8217;uso e ovviamente se il SID cambia nonostante l&#8217;utente sia lo stesso lui non funziona, l&#8217;ho scoperto nel modo pi\u00f9 doloroso possibile nell&#8217;agosto del 2019 durante la migrazione, quindi adesso sto preparandomi molto prima prima di avere altre sgradite sorprese.<br \/>\nIn sostanza la situazione \u00e8 la seguente,<\/p>\n<p>Nuove macchine virtuali per fare AD DC e DC di supporto che avranno lo stesso IP delle vecchie ma SO attuale stable (Devuan 4) e Samba 4 al momento di questo documento 4.15.3 (in produzione c&#8217;\u00e8 la 4.10.6) e nuova macchina virtuale che far\u00e0 la condivisione di risorse, le tre macchine devono essere allineate come versione di samba.<br \/>\nI passi sono 4 e vale a dire<\/p>\n<p>aggiornamento delle macchine a Devuan 4<\/p>\n<p>eliminazione del vecchio codice<\/p>\n<p>compilazione del samba<\/p>\n<p>installazione del nuovo samba<\/p>\n<p>Le macchine sono macchine virtuali da 30 GB ciascuna una urania \u00e8 l&#8217;AD DC l&#8217;altra danaide e&#8217; il DC aggiunto e sono entrambe con a bordo Devuan ascii, il primo passo \u00e8 portarle a beowulf vale a dire dalla release 2 alla 3 quindi apt-get update apt-get dist-upgrade per avere l&#8217;ultima versione disponibile di ascii quindi modifica del sources list in beowulf e seguendo le indicazioni sul sito di Devuan apt-get dist-upgrade apt-get &#8211;purge autoremove apt-get autoclean e un reboot.<br \/>\nCambio del sources list da beowulf a chimaera e sempre secondo le indicazioni sul sito aggiornamentoin due step apt-get update apt-get upgrade apt-get dist-upgrade apt-get &#8211;purge autoremove apt-get autoclean e le macchine sono pronte.<\/p>\n<p>Fermando il demone samba entrare nella directory dei sorgenti vecchi e dare un make uninstall che elimina le librerie e quant&#8217;altro del samba vecchio, scaricare e scompattare in \/usr\/src\/ samba 4.15.3 .\/configure con le stesse opzioni del vecchio samba che si possono trovare nella directory dei sorgenti vecchi nel file .lock-wscript make e make install<\/p>\n<p>Su urania samba-tool dbcheck &#8211;cross-ncs se dice che ci sono errori ripetere il comando aggiungendo &#8211;fix quindi una volta a posto \/etc\/init.d\/samba-ac-dc start<br \/>\nsmbstatus<\/p>\n<p>Samba version 4.15.3<br \/>\nPID \u00a0\u00a0\u00a0\u00a0Username \u00a0\u00a0\u00a0\u00a0Group \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Machine \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Protocol Version \u00a0Encryption \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Signing<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\n27300 \u00a0\u00a03000029 \u00a0\u00a0\u00a0\u00a0\u00a03000026 \u00a0\u00a0\u00a0\u00a0\u00a0192.168.3.10 (ipv4:192.168.3.10:41486) \u00a0\u00a0\u00a0SMB3_11 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<br \/>\n27500 \u00a0\u00a03000102 \u00a0\u00a0\u00a0\u00a0\u00a03000026 \u00a0\u00a0\u00a0\u00a0\u00a0192.168.2.1 (ipv4:192.168.2.1:49522) \u00a0\u00a0\u00a0\u00a0\u00a0SMB3_11 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<br \/>\n8955 \u00a0\u00a0\u00a03000112 \u00a0\u00a0\u00a0\u00a0\u00a03000026 \u00a0\u00a0\u00a0\u00a0\u00a0192.168.2.75 (ipv4:192.168.2.75:58985) \u00a0\u00a0\u00a0SMB3_11 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0partial(AES-128-GMAC)<br \/>\n12494 \u00a0\u00a03000202 \u00a0\u00a0\u00a0\u00a0\u00a03000026 \u00a0\u00a0\u00a0\u00a0\u00a0192.168.2.159 (ipv4:192.168.2.159:59941) \u00a0SMB3_11 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<br \/>\n27310 \u00a0\u00a03000238 \u00a0\u00a0\u00a0\u00a0\u00a03000026 \u00a0\u00a0\u00a0\u00a0\u00a0192.168.2.254 (ipv4:192.168.2.254:33836) \u00a0SMB3_11 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<\/p>\n<p>Service \u00a0\u00a0\u00a0\u00a0\u00a0pid \u00a0\u00a0\u00a0\u00a0Machine \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Connected at \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0Encryption \u00a0\u00a0Signing<br \/>\n&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;<br \/>\nIPC$ \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a027300 \u00a0\u00a0192.168.3.10 \u00a0gio gen 13 04:08:37 2022 CET \u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<br \/>\nIPC$ \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a027500 \u00a0\u00a0192.168.2.1 \u00a0\u00a0gio gen 13 04:11:59 2022 CET \u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0&#8211;<br \/>\nIPC$ \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a08955 \u00a0\u00a0\u00a0192.168.2.75 \u00a0gio gen 13 09:21:30 2022 CET \u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-GMAC<br \/>\nIPC$ \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a027310 \u00a0\u00a0192.168.2.254 gio gen 13 04:08:57 2022 CET \u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<br \/>\nIPC$ \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a012494 \u00a0\u00a0192.168.2.159 gio gen 13 10:31:47 2022 CET \u00a0\u00a0\u00a0\u00a0&#8211; \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0AES-128-CMAC<\/p>\n<p>No locked files<\/p>\n<p>una situazione di questo tipo va bene, la prova del nove \u00e8 fare login con un utenza e una macchina windows per vedere se il tutto funziona a dovere, vale a dire se il login avviene regolarmente, se le unita&#8217; remote vengono mappate correttamente se le stampe vanno senza creare code.<\/p>\n<p>Su danaide stessi passi per la configurazione e compilazione di samba, poi mv \/usr\/local\/samba\/etc\/smb.conf smb.bak\u00a0 cancellare da <i class=\"moz-txt-slash\"><span class=\"moz-txt-tag\">\/<\/span>usr\/local\/samba\/private<span class=\"moz-txt-tag\">\/<\/span><\/i> secrets.ldb e secrets.tdb\u00a0 e quindi un<\/p>\n<p>samba-tool domain join myfirm.local DC -U&#8221;MYFIRM\\administrator&#8221;<\/p>\n<p>INFO 2022-01-12 11:14:24,376 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #105: Finding a writeable DC for domain &#8216;myfirm.local&#8217;<br \/>\nINFO 2022-01-12 11:14:24,385 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #107: Found DC urania.myfirm.local<br \/>\nPassword for [MYFIRM\\administrator]:<br \/>\nINFO 2022-01-12 11:14:29,579 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1527: workgroup is MYFIRM<br \/>\nINFO 2022-01-12 11:14:29,579 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1530: realm is myfirm.local<br \/>\nAdding CN=DANAIDE,OU=Domain Controllers,DC=myfirm,DC=local<br \/>\nAdding CN=DANAIDE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=myfirm,DC=local<br \/>\nAdding CN=NTDS Settings,CN=DANAIDE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=myfirm,DC=local<br \/>\nAdding SPNs to CN=DANAIDE,OU=Domain Controllers,DC=myfirm,DC=local<br \/>\nSetting account password for DANAIDE$<br \/>\nEnabling account<br \/>\nCalling bare provision<br \/>\nINFO 2022-01-12 11:14:30,048 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2105: Looking up IPv4 addresses<br \/>\nINFO 2022-01-12 11:14:30,049 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2122: Looking up IPv6 addresses<br \/>\nWARNING 2022-01-12 11:14:30,050 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2129: No IPv6 address will be assigned<br \/>\nINFO 2022-01-12 11:14:30,205 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2275: Setting up secrets.ldb<br \/>\nINFO 2022-01-12 11:14:30,258 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2280: Setting up the registry<br \/>\nINFO 2022-01-12 11:14:30,294 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2283: Setting up the privileges database<br \/>\nINFO 2022-01-12 11:14:30,360 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2286: Setting up idmap db<br \/>\nINFO 2022-01-12 11:14:30,406 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2293: Setting up SAM db<br \/>\nINFO 2022-01-12 11:14:30,423 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #880: Setting up sam.ldb partitions and settings<br \/>\nINFO 2022-01-12 11:14:30,426 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #892: Setting up sam.ldb rootDSE<br \/>\nINFO 2022-01-12 11:14:30,436 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #1305: Pre-loading the Samba 4 and AD schema<br \/>\nUnable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs<\/p>\n<p>INFO 2022-01-12 11:14:30,574 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2345: A Kerberos configuration suitable for Samba AD has been generated at \/usr\/local\/samba\/private\/krb5.conf<br \/>\nINFO 2022-01-12 11:14:30,574 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/provision\/__init__.py #2347: Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!<br \/>\nProvision OK for domain DN DC=myfirm,DC=local<br \/>\nStarting replication<br \/>\nSchema-DN[CN=Schema,CN=Configuration,DC=myfirm,DC=local] objects[402\/1550] linked_values[0\/0]<br \/>\nSchema-DN[CN=Schema,CN=Configuration,DC=myfirm,DC=local] objects[804\/1550] linked_values[0\/0]<br \/>\nSchema-DN[CN=Schema,CN=Configuration,DC=myfirm,DC=local] objects[1206\/1550] linked_values[0\/0]<br \/>\nSchema-DN[CN=Schema,CN=Configuration,DC=myfirm,DC=local] objects[1550\/1550] linked_values[0\/0]<br \/>\nAnalyze and apply schema objects<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[402\/1624] linked_values[0\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[804\/1624] linked_values[0\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[1206\/1624] linked_values[0\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[1608\/1624] linked_values[0\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[1624\/1624] linked_values[36\/36]<br \/>\nFailed to commit objects: DOS code 0x000021bf<br \/>\nMissing target object &#8211; retrying with DRS_GET_TGT<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[2026\/1624] linked_values[37\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[2428\/1624] linked_values[37\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[2830\/1624] linked_values[37\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[3232\/1624] linked_values[37\/1]<br \/>\nPartition[CN=Configuration,DC=myfirm,DC=local] objects[3248\/1624] linked_values[72\/36]<br \/>\nReplicating critical objects from the base DN of the domain<br \/>\nPartition[DC=myfirm,DC=local] objects[97\/97] linked_values[27\/27]<br \/>\nPartition[DC=myfirm,DC=local] objects[402\/509] linked_values[0\/548]<br \/>\nPartition[DC=myfirm,DC=local] objects[509\/509] linked_values[548\/548]<br \/>\n..\/..\/lib\/ldb\/ldb_key_value\/ldb_kv_index.c:2955: duplicate attribute value in CN=PC25,CN=Computers,DC=myfirm,DC=local for index on servicePrincipalName, duplicate of objectGUID 97a8a94e-9e88-4c6b-9e9e-52b2a35f1b24 in @INDEX:SERVICEPRINCIPALNAME:TERMSRV\/PC25.MYFIRM.LOCAL<br \/>\n..\/..\/lib\/ldb\/ldb_key_value\/ldb_kv_index.c:2955: duplicate attribute value in CN=PC68,CN=Computers,DC=myfirm,DC=local for index on servicePrincipalName, duplicate of objectGUID f128c15a-5cf2-4557-a5f9-0054909cf046 in @INDEX:SERVICEPRINCIPALNAME:TERMSRV\/PC68.MYFIRM.LOCAL<br \/>\nDone with always replicated NC (base, config, schema)<br \/>\nReplicating DC=DomainDnsZones,DC=myfirm,DC=local<br \/>\nPartition[DC=DomainDnsZones,DC=myfirm,DC=local] objects[132\/132] linked_values[0\/0]<br \/>\nReplicating DC=ForestDnsZones,DC=myfirm,DC=local<br \/>\nPartition[DC=ForestDnsZones,DC=myfirm,DC=local] objects[19\/19] linked_values[0\/0]<br \/>\nExop on[CN=RID Manager$,CN=System,DC=myfirm,DC=local] objects[3] linked_values[0]<br \/>\nCommitting SAM database<br \/>\nRepacking database from v1 to v2 format (first record CN=ms-DFSR-FileFilter,CN=Schema,CN=Configuration,DC=myfirm,DC=local)<br \/>\nRepack: re-packed 10000 records so far<br \/>\nRepacking database from v1 to v2 format (first record CN=msCOM-Partition-Display,CN=804,CN=DisplaySpecifiers,CN=Configuration,DC=myfirm,DC=local)<br \/>\nRepacking database from v1 to v2 format (first record DC=PC16,DC=myfirm.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=myfirm,DC=local)<br \/>\nRepacking database from v1 to v2 format (first record DC=_msdcs.myfirm.local,CN=MicrosoftDNS,DC=ForestDnsZones,DC=myfirm,DC=local)<br \/>\nRepacking database from v1 to v2 format (first record CN=eos-users,CN=Users,DC=myfirm,DC=local)<br \/>\nINFO 2022-01-12 11:14:38,593 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1100: Adding 1 remote DNS records for DANAIDE.myfirm.local<br \/>\nINFO 2022-01-12 11:14:38,685 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1163: Adding DNS A record DANAIDE.myfirm.local for IPv4 IP: 192.168.2.228<br \/>\nINFO 2022-01-12 11:14:38,711 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1191: Adding DNS CNAME record 0d02264e-39b7-44d7-81fd-5cc6c76529bb._msdcs.myfirm.local for DANAIDE.myfirm.local<br \/>\nINFO 2022-01-12 11:14:38,742 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1216: All other DNS records (like _ldap SRV records) will be created samba_dnsupdate on first startup<br \/>\nINFO 2022-01-12 11:14:38,743 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1222: Replicating new DNS records in DC=DomainDnsZones,DC=myfirm,DC=local<br \/>\nPartition[DC=DomainDnsZones,DC=myfirm,DC=local] objects[3\/3] linked_values[0\/0]<br \/>\nINFO 2022-01-12 11:14:38,780 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1222: Replicating new DNS records in DC=ForestDnsZones,DC=myfirm,DC=local<br \/>\nPartition[DC=ForestDnsZones,DC=myfirm,DC=local] objects[2\/2] linked_values[0\/0]<br \/>\nINFO 2022-01-12 11:14:38,798 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1237: Sending DsReplicaUpdateRefs for all the replicated partitions<br \/>\nINFO 2022-01-12 11:14:38,832 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1267: Setting isSynchronized and dsServiceName<br \/>\nINFO 2022-01-12 11:14:38,850 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1282: Setting up secrets database<br \/>\nINFO 2022-01-12 11:14:38,941 pid:3166 \/usr\/local\/samba\/lib\/python3.9\/site-packages\/samba\/join.py #1544: Joined domain MYFIRM (SID S-1-5-21-722562639-1834358410-470000291) as a DC<\/p>\n<p>Verifichiamo che il joining abbia creato i record giusti<\/p>\n<p>host -t A DANAIDE.myfirm.local<br \/>\ndanaide.myfirm.local has address 192.168.2.228<\/p>\n<p>ldbsearch -H \/usr\/local\/samba\/private\/sam.ldb &#8216;(invocationId=*)&#8217; &#8211;cross-ncs objectguid<br \/>\n# record 1<br \/>\ndn: CN=NTDS Settings,CN=DANAIDE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=myfirm,DC=local<br \/>\nobjectGUID: ab082391-d712-4aea-bef7-d3130a48dcc2<\/p>\n<p># record 2<br \/>\ndn: CN=NTDS Settings,CN=URANIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=myfirm,DC=local<br \/>\nobjectGUID: d9ad3f1e-a3d0-48bf-8d69-1de4b667ed06<\/p>\n<p># returned 2 records<br \/>\n# 2 entries<br \/>\n# 0 referrals<br \/>\nhost -t CNAME ab082391-d712-4aea-bef7-d3130a48dcc2._msdcs.myfirm.local.<br \/>\nab082391-d712-4aea-bef7-d3130a48dcc2._msdcs.myfirm.local is an alias for DANAIDE.myfirm.local.<br \/>\nil tutto \u00e8 andato a posto<\/p>\n<p>Su\u00a0 urania<\/p>\n<pre>tdbbackup -s .bak \/usr\/local\/samba\/private\/idmap.ldb \r\nscp idmap.ldb.bak root@danaide:\/usr\/local\/samba\/private\/<\/pre>\n<p>su danaide<\/p>\n<p>mv \/usr\/local\/samba\/private\/idmap.ldb.bak<\/p>\n<pre>\/usr\/local\/samba\/private\/idmap.ldb<\/pre>\n<p>N.B.<\/p>\n<p>come spiegato qui:<br \/>\nhttps:\/\/wiki.samba.org\/index.php\/Upgrading_a_Samba_AD_DC#Samba_AD_DC_Database_Check<\/p>\n<p>una volta aggiornato il samba al riavvio questo <span style=\"text-decoration: underline;\">NON<\/span> parte, effettivamente la cosa non \u00e8 chiarissima, perche dice anche di togliere prima la vecchia installazione, quindi la logica mi direbbe che il make uninstall pulisce tutto, evidentemente la mia logica non \u00e8 quella degli sviluppatori di samba, per altro la cosa &#8220;buffa&#8221; \u00e8 che se si lavora col samba pacchettizzato questo problema non c&#8217;\u00e8.<\/p>\n<p>Ad ogni modo dopo diversi giorni e prove da manicomio con conseguenti mal di testa e di stomaco la soluzione \u00e8 come quasi sempre la pii\u00f9 semplice, e vale a dire una volta finito aggiungere in \/etc\/rc.local una riga con \/etc\/init.d\/samba-ac-dc start<br \/>\nAl riavvio tutto gira a dovere.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In questi giorni sto facendo il test per vedere come fare per cambiare samba sui server nuovi che installeremo il prossimo anno. Sino al 2019 non mi preoccupavo pi\u00f9 di tanto, siamo 44 gatti in ditta, quindi ad ogni cambio server e di conseguenza di versione SO e samba rigeneravo tutti gli utenti e i [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,11,6],"tags":[97,223,82,231],"class_list":["post-2067","post","type-post","status-publish","format-standard","hentry","category-linux","category-samba","category-work","tag-compilazione","tag-devuan-4","tag-dipendenze","tag-samba-4"],"_links":{"self":[{"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/posts\/2067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2067"}],"version-history":[{"count":14,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/posts\/2067\/revisions"}],"predecessor-version":[{"id":2213,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=\/wp\/v2\/posts\/2067\/revisions\/2213"}],"wp:attachment":[{"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/clark.tipistrani.it\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}