Prev: [Samba] Samba4 / Debian Sid
Next: How small can a compiled smbd/nmd be?
From: Weiss, Benjamin on 3 Dec 2009 16:10
I’ve been trying to get replication working on Samba4 for a couple of
weeks, with no success. I’ve tried the latest rsync’s, and today’s
failure was using the Alpha9. I’m running on 64-bit Ubuntu 9.10 server,
fully patched.



I’ve tried to replicate the procedure as set forth by Tridge here:
http://lists.samba.org/archive/samba-technical/2009-September/066753.htm
l



My test network is 172.16.1.0, gateway 172.16.1.1, netmask
255.255.255.0. In that post he has two virtual interfaces, which I
couldn’t work right, so I am using two physical interfaces. Eth0 is
172.16.1.5, eth1 is 172.16.1.6.



I prefer to do everything from the command line, including making
changes to configuration files, when possible. This lets me post what
I’ve done to either documentation or to help forums such as this. ;) So
below I have all of the steps I’ve taken to attempt to make this work.



The first instance seems to come up just fine the first time, but when I
then try the vampire the first time from the second instance, I get :



libnet_BecomeDC() failed - NT code 0xc00020ee

Vampire of domain failed: NT code 0xc00020ee

return code = -1



Then I stop the first instance to see what’s going on. If I start it
again, I start getting errors about :



dreplsrv_notify_schedule(5) scheduled for: Thu Dec 3 14:27:45 2009 CST

dns child failed to find name
'2e4b0881-0548-4a23-a7de-fab3e24088ca._msdcs.local.osbi.ok.gov' of type
A

dreplsrv_op_pull_source(WERR_BADFILE/NT_STATUS_NO_SUCH_DEVICE)
failures[1]

Mapped to DCERPC endpoint 135



If I then try to do the vampire again from the second instance, I get:



Vampire of domain failed: Connection to SAMR pipe of PDC for
local.osbi.ok.gov failed: Connection to DC failed: NT_STATUS_IO_TIMEOUT

return code = -1



I’m not sure what you guys need me to post, or the appropriate way to
grab debugging logs, nor the appropriate way to post them here. So,
below is my set of commands. Hopefully somebody can help me!



sudo sh -c "echo 'HISTSIZE=10000' >> /etc/profile"

sudo apt-get update

sudo apt-get -y upgrade

sudo apt-get -y install ufw

sudo ufw allow ssh/tcp

sudo ufw enable

sudo ufw status numbered

sudo apt-get -y install attr autoconf gcc \

python python-dev bind9 dnsutils \

libattr1-dev libblkid-dev libgnutls-dev \

libreadline5-dev dhcp3-server

sudo mv /etc/fstab /etc/fstab.000

sudo sh -c "sed -e 's/errors=remount-ro/user_xattr,errors=remount-ro/' \

< /etc/fstab.000 > /etc/fstab"

sudo reboot



wget http://samba.org/samba/ftp/samba4/samba-4.0.0alpha9.tar.gz

tar -zxvf samba-4.0.0alpha9.tar.gz

cd samba-4.0.0alpha9/source4/

./autogen.sh

./configure.developer --prefix=$HOME/prefix.s4

make > $HOME/samba4-make.log 2>&1

make install

sudo ./setup/provision --realm=local.osbi.ok.gov \

--domain=OSBI --host-name=sm-dc-fsc01 \

--host-ip=172.16.1.5 --adminpass=HelloSamba \

--server-role="domain controller"

sudo ufw allow 53

sudo ufw allow 88

sudo ufw allow 445/tcp

sudo ufw allow 1024/tcp

sudo ufw allow 1025/tcp

sudo ufw allow 1026/tcp

sudo ufw allow 3268/tcp

sudo ufw allow 389

sudo ufw allow 135/tcp

sudo ufw allow 137/udp

sudo ufw allow 138/udp

sudo ufw allow 139/tcp

sudo ufw allow 464

sudo ufw status numbered

sudo cp $HOME/prefix.s4/private/local.osbi.ok.gov.zone /etc/bind

sudo mv /etc/bind/named.conf.options /etc/bind/named.conf.options.000



sudo sh -c "sed -e '/listen-on-v6/ aforwarders { 192.168.1.5; };' \

-e '/listen-on-v6/ aallow-recursion { 172.16.0.0/16; };'
\

-e '/listen-on-v6/ atkey-gssapi-credential
\"DNS/local.osbi.ok.gov\";' \

-e '/listen-on-v6/ atkey-domain \"LOCAL.OSBI.OK.GOV\";'
\

< /etc/bind/named.conf.options.000 >
/etc/bind/named.conf.options"



sudo sh -c "echo 'export KRB5_KTNAME=\"/etc/krb5.keytab\"' >>
/etc/default/bind9"

sudo cp $HOME/prefix.s4/private/dns.keytab /etc/krb5.keytab

sudo chgrp bind /etc/krb5.keytab

sudo chmod g+r /etc/krb5.keytab

sudo cp $HOME/prefix.s4/private/krb5.conf /etc/krb5.conf

sudo cp /etc/bind/named.conf.local /etc/bind.named.conf.local.000

sudo sh -c "echo 'zone \"local.osbi.ok.gov.\" IN {' >>
/etc/bind/named.conf.local"

sudo sh -c "echo ' type master;' >> /etc/bind/named.conf.local"

sudo sh -c "echo ' file \"/etc/bind/local.osbi.ok.gov.zone\";' >>
/etc/bind/named.conf.local"

sudo sh -c "echo ' update-policy {' >> /etc/bind/named.conf.local"

sudo sh -c "echo ' grant LOCAL.OSBI.OK.GOV ms-self * A AAAA;' >>
/etc/bind/named.conf.local"

sudo sh -c "echo ' };' >> /etc/bind/named.conf.local"

sudo sh -c "echo '};' >> /etc/bind/named.conf.local"

sudo sh -c "echo '' >> /etc/bind/named.conf.local"

sudo mv /etc/apparmor.d/usr.sbin.named
/etc/apparmor.d/usr.sbin.named.000

sudo sh -c "sed -e '/\/etc\/bind\/krb5.keytab kr,/ a /var/tmp/ rw,' \

< /etc/apparmor.d/usr.sbin.named.000 >>
/etc/apparmor.d/usr.sbin.named"

sudo aa-complain /etc/apparmor.d/usr.sbin.named

sudo service bind9 start

host -t SRV _ldap._tcp.local.osbi.ok.gov localhost

sudo mv $HOME/prefix.s4/etc/smb.conf $HOME/prefix.s4/etc/smb.conf.000

sudo sh -c "sed -e '/netlogon/ iinterfaces = 172.16.1.5' \

-e '/netlogon/ ibind interfaces only = yes' \

-e '/netlogon/ idreplsrv:periodic_interval = 10' \

-e '/netlogon/ idreplsrv:periodic_startup_interval = 5'
\

< $HOME/prefix.s4/etc/smb.conf.000 >
$HOME/prefix.s4/etc/smb.conf"

sudo sbin/samba -i -M single -d4 -s etc/smb.conf

sudo ufw disable

sudo sbin/samba -i -M single -d4 -s etc/smb.conf



mkdir $HOME/prefix.s4.2

cd $HOME/prefix.s4.2

mkdir -p private etc var var/lib var/run var/locks var/ncalrpc



sudo sh -c "sed -e 's/172.16.1.5/172.16.1.6/' \

-e '/netlogon/ incalrpc dir =
$HOME/prefix.s4.2/var/ncalrpc' \

-e '/netlogon/ iprivate dir = $HOME/prefix.s4.2/private'
\

-e '/netlogon/ iswat directory =
$HOME/prefix.s4.2/share/swat' \

-e '/netlogon/ ilock dir = $HOME/prefix.s4.2/var/locks'
\

-e '/netlogon/ ipid directory =
$HOME/prefix.s4.2/var/run' \

-e '/netlogon/ iwinbindd socket directory =
$HOME/prefix.s4.2/var/run/winbindd' \

-e '/netlogon/ iwinbindd privileged socket directory =
$HOME/prefix.s4.2/var/lib/winbindd_privileged' \

-e '/netlogon/ intp signd socket directory =
$HOME/prefix.s4.2/var/run/ntp_signd' \

< $HOME/prefix.s4/etc/smb.conf >
$HOME/prefix.s4.2/etc/smb.conf"


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: [Samba] Samba4 / Debian Sid
Next: How small can a compiled smbd/nmd be?