We have been looking at DRSUAPI/DsAddEntry, and have a few questions. We are trying to implement subdomain support in Samba4 before the plugfest.
We have been able to generate error cases that do not seem to be 'possible' in the docs. Can you please clarify exactly what errors this function should be able to return, and document how to avoid these: in join-s1.txt we have an error that is only listed in the docs when removing a DC from the domain. extended_err : WERR_DS_ROLE_NOT_VERIFIED This is currently blocking us. Our only theory is that we must perform a replication cycle before we do this call. in join-s1-2.txt we have another error, that we worked around by creating the partitions object before creating the server object. However, as we need to match the server-side behaviour, we need to know the undocumented circumstances that cause this error. extended_err : WERR_DS_NO_CROSSREF_FOR_NC Finally, is there any documentation of the high-level procedure for creating a subdomain? Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org
lpcfg_load: refreshing parameters from /home/tridge/samba/git/prefix.s2/etc/smb.conf drsuapi_DsBind: struct drsuapi_DsBind in: struct drsuapi_DsBind bind_guid : * bind_guid : e24d201a-4fd6-11d1-a3da-0000f875ae0d bind_info : * bind_info: struct drsuapi_DsBindInfoCtr length : 0x0000001c (28) info : union drsuapi_DsBindInfo(case 28) info28: struct drsuapi_DsBindInfo28 supported_extensions : 0x0fefff7f (267386751) 1: DRSUAPI_SUPPORTED_EXTENSION_BASE 1: DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI 1: DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1 1: DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION 0: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY 1: DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2 1: DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2 1: DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD 1: DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND 1: DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO 1: DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01 1: DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP 1: DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY 1: DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3 0: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6 1: DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7 1: DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT 0: DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS 0: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART2 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART3 site_guid : 00000000-0000-0000-0000-000000000000 pid : 0x00000000 (0) repl_epoch : 0x00000000 (0) drsuapi_DsBind: struct drsuapi_DsBind out: struct drsuapi_DsBind bind_info : * bind_info: struct drsuapi_DsBindInfoCtr length : 0x00000030 (48) info : union drsuapi_DsBindInfo(case 48) info48: struct drsuapi_DsBindInfo48 supported_extensions : 0x3fffff7f (1073741695) 1: DRSUAPI_SUPPORTED_EXTENSION_BASE 1: DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI 1: DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1 1: DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION 0: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY 1: DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2 1: DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2 1: DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD 1: DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND 1: DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO 1: DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01 1: DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP 1: DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY 1: DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6 1: DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7 1: DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT 1: DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART2 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART3 site_guid : a52afd0b-98f4-40fe-aebe-b6525f92454c pid : 0x000001e4 (484) repl_epoch : 0x00000000 (0) supported_extensions_ext : 0x00000002 (2) 0: DRSUAPI_SUPPORTED_EXTENSION_ADAM 1: DRSUAPI_SUPPORTED_EXTENSION_LH_BETA2 0: DRSUAPI_SUPPORTED_EXTENSION_RECYCLE_BIN config_dn_guid : aad7e818-bcf6-4167-bad6-31205141ecba bind_handle : * bind_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6eb9b2a1-7e0e-4ee2-855c-f7ac0bb38270 result : WERR_OK drsuapi_DsAddEntry: struct drsuapi_DsAddEntry in: struct drsuapi_DsAddEntry bind_handle : * bind_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 6eb9b2a1-7e0e-4ee2-855c-f7ac0bb38270 level : 0x00000002 (2) req : * req : union drsuapi_DsAddEntryRequest(case 2) req2: struct drsuapi_DsAddEntryRequest2 first_object: struct drsuapi_DsReplicaObjectListItem next_object : NULL object: struct drsuapi_DsReplicaObject identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000b4 (180) __ndr_size_sid : 0x00000000 (0) guid : 00000000-0000-0000-0000-000000000000 sid : S-0-0 __ndr_size_dn : 0x0000003d (61) dn : 'CN=S2,CN=Partitions,CN=Configuration,DC=v2,DC=tridgell,DC=net' flags : 0x00000000 (0) 0: DRSUAPI_DS_REPLICA_OBJECT_FROM_MASTER 0: DRSUAPI_DS_REPLICA_OBJECT_DYNAMIC 0: DRSUAPI_DS_REPLICA_OBJECT_REMOTE_MODIFY attribute_ctr: struct drsuapi_DsReplicaAttributeCtr num_attributes : 0x00000007 (7) attributes : * attributes: ARRAY(7) attributes: struct drsuapi_DsReplicaAttribute attid : UNKNOWN_ENUM_VALUE (0x90057) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 53 00 32 00 S.2. attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_systemFlags (0x90177) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 03 00 00 00 .... attributes: struct drsuapi_DsReplicaAttribute attid : UNKNOWN_ENUM_VALUE (0x9001C) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000024 (36) blob : * blob : DATA_BLOB length=36 [0000] 73 00 32 00 2E 00 76 00 32 00 2E 00 74 00 72 00 s.2...v. 2...t.r. [0010] 69 00 64 00 67 00 65 00 6C 00 6C 00 2E 00 6E 00 i.d.g.e. l.l...n. [0020] 65 00 74 00 e.t. attributes: struct drsuapi_DsReplicaAttribute attid : UNKNOWN_ENUM_VALUE (0x20010) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000076 (118) blob : * blob : DATA_BLOB length=118 [0000] 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 v....... ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 1E 00 00 00 44 00 43 00 3D 00 73 00 ........ D.C.=.s. [0040] 32 00 2C 00 44 00 43 00 3D 00 76 00 32 00 2C 00 2.,.D.C. =.v.2.,. [0050] 44 00 43 00 3D 00 74 00 72 00 69 00 64 00 67 00 D.C.=.t. r.i.d.g. [0060] 65 00 6C 00 6C 00 2C 00 44 00 43 00 3D 00 6E 00 e.l.l.,. D.C.=.n. [0070] 65 00 74 00 00 00 e.t... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_objectCategory (0x9030E) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000ba (186) blob : * blob : DATA_BLOB length=186 [0000] BA 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 40 00 00 00 43 00 4E 00 3D 00 43 00 ....@... C.N.=.C. [0040] 72 00 6F 00 73 00 73 00 2D 00 52 00 65 00 66 00 r.o.s.s. -.R.e.f. [0050] 2C 00 43 00 4E 00 3D 00 53 00 63 00 68 00 65 00 ,.C.N.=. S.c.h.e. [0060] 6D 00 61 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 m.a.,.C. N.=.C.o. [0070] 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 74 00 n.f.i.g. u.r.a.t. [0080] 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 76 00 i.o.n.,. D.C.=.v. [0090] 32 00 2C 00 44 00 43 00 3D 00 74 00 72 00 69 00 2.,.D.C. =.t.r.i. [00A0] 64 00 67 00 65 00 6C 00 6C 00 2C 00 44 00 43 00 d.g.e.l. l.,.D.C. [00B0] 3D 00 6E 00 65 00 74 00 00 00 =.n.e.t. .. attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_objectClass (0x0) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue attid : 0x0003000b (196619) attributes: struct drsuapi_DsReplicaAttribute attid : UNKNOWN_ENUM_VALUE (0x901D7) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000b4 (180) blob : * blob : DATA_BLOB length=180 [0000] B4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 3D 00 00 00 43 00 4E 00 3D 00 56 00 ....=... C.N.=.V. [0040] 32 00 2C 00 43 00 4E 00 3D 00 50 00 61 00 72 00 2.,.C.N. =.P.a.r. [0050] 74 00 69 00 74 00 69 00 6F 00 6E 00 73 00 2C 00 t.i.t.i. o.n.s.,. [0060] 43 00 4E 00 3D 00 43 00 6F 00 6E 00 66 00 69 00 C.N.=.C. o.n.f.i. [0070] 67 00 75 00 72 00 61 00 74 00 69 00 6F 00 6E 00 g.u.r.a. t.i.o.n. [0080] 2C 00 44 00 43 00 3D 00 76 00 32 00 2C 00 44 00 ,.D.C.=. v.2.,.D. [0090] 43 00 3D 00 74 00 72 00 69 00 64 00 67 00 65 00 C.=.t.r. i.d.g.e. [00A0] 6C 00 6C 00 2C 00 44 00 43 00 3D 00 6E 00 65 00 l.l.,.D. C.=.n.e. [00B0] 74 00 00 00 t... drsuapi_DsAddEntry: struct drsuapi_DsAddEntry out: struct drsuapi_DsAddEntry level_out : * level_out : 0x00000003 (3) ctr : * ctr : union drsuapi_DsAddEntryCtr(case 3) ctr3: struct drsuapi_DsAddEntryCtr3 id : * id: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x000000b4 (180) __ndr_size_sid : 0x00000000 (0) guid : 40a8a6c8-9e75-4211-8eb0-20d13382ceff sid : S-0-0 __ndr_size_dn : 0x0000003d (61) dn : 'CN=S2,CN=Partitions,CN=Configuration,DC=v2,DC=tridgell,DC=net' err_ver : 0x00000001 (1) err_data : * err_data : union drsuapi_DsAddEntry_ErrData(case 1) v1: struct drsuapi_DsAddEntry_ErrData_V1 status : WERR_ACCESS_DENIED dir_err : DRSUAPI_DIRERR_SERVICE (5) info : * info : union drsuapi_DsAddEntryErrorInfo(case 5) service_err: struct drsuapi_DsAddEntryErrorInfoX dsid : 0x030a0ae6 (50989798) extended_err : WERR_DS_ROLE_NOT_VERIFIED extended_data : 0x000021a2 (8610) problem : 0x1394 (5012) count : 0x00000000 (0) objects : NULL result : WERR_OK ERROR(runtime): uncaught exception - DsAddEntry failed File "bin/python/samba/netcmd/__init__.py", line 141, in _run return self.run(*args, **kwargs) File "bin/python/samba/netcmd/domain.py", line 123, in run site=site, netbios_name=netbios_name, netbios_domain=netbios_domain, targetdir=targetdir) File "bin/python/samba/join.py", line 846, in join_subdomain ctx.do_join() File "bin/python/samba/join.py", line 721, in do_join ctx.join_add_objects() File "bin/python/samba/join.py", line 417, in join_add_objects ctx.DsAddEntry(rec) File "bin/python/samba/join.py", line 342, in DsAddEntry raise RuntimeError("DsAddEntry failed") Finding a writeable DC for domain 'v2.tridgell.net' Found DC w2k8.v2.tridgell.net checking samaccountname Deleted CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net Adding CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net Adding CN=NTDS Settings,CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net Adding CN=S2,CN=Partitions,CN=Configuration,DC=v2,DC=tridgell,DC=net {'dn': 'CN=S2,CN=Partitions,CN=Configuration,DC=v2,DC=tridgell,DC=net', 'nETBIOSName': 'S2', 'systemFlags': '3', 'dnsRoot': 's2.v2.tridgell.net', 'nCName': 'DC=s2,DC=v2,DC=tridgell,DC=net', 'objectCategory': 'CN=Cross-Ref,CN=Schema,CN=Configuration,DC=v2,DC=tridgell,DC=net', 'objectclass': 'crossRef', 'trustParent': 'CN=V2,CN=Partitions,CN=Configuration,DC=v2,DC=tridgell,DC=net'} DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8610, 'WERR_DS_ROLE_NOT_VERIFIED') Join failed - cleaning up
lpcfg_load: refreshing parameters from /home/tridge/samba/git/prefix.s2/etc/smb.conf drsuapi_DsBind: struct drsuapi_DsBind in: struct drsuapi_DsBind bind_guid : * bind_guid : e24d201a-4fd6-11d1-a3da-0000f875ae0d bind_info : * bind_info: struct drsuapi_DsBindInfoCtr length : 0x0000001c (28) info : union drsuapi_DsBindInfo(case 28) info28: struct drsuapi_DsBindInfo28 supported_extensions : 0x0fefff7f (267386751) 1: DRSUAPI_SUPPORTED_EXTENSION_BASE 1: DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI 1: DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1 1: DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION 0: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY 1: DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2 1: DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2 1: DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD 1: DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND 1: DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO 1: DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01 1: DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP 1: DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY 1: DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3 0: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6 1: DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7 1: DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT 0: DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS 0: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART2 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART3 site_guid : 00000000-0000-0000-0000-000000000000 pid : 0x00000000 (0) repl_epoch : 0x00000000 (0) drsuapi_DsBind: struct drsuapi_DsBind out: struct drsuapi_DsBind bind_info : * bind_info: struct drsuapi_DsBindInfoCtr length : 0x00000030 (48) info : union drsuapi_DsBindInfo(case 48) info48: struct drsuapi_DsBindInfo48 supported_extensions : 0x3fffff7f (1073741695) 1: DRSUAPI_SUPPORTED_EXTENSION_BASE 1: DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI 1: DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1 1: DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION 0: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY 1: DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2 1: DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2 1: DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD 1: DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND 1: DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO 1: DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION 1: DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01 1: DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP 1: DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY 1: DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6 1: DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6 1: DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7 1: DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT 1: DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS 1: DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART2 0: DRSUAPI_SUPPORTED_EXTENSION_RESERVED_PART3 site_guid : a52afd0b-98f4-40fe-aebe-b6525f92454c pid : 0x000001e4 (484) repl_epoch : 0x00000000 (0) supported_extensions_ext : 0x00000002 (2) 0: DRSUAPI_SUPPORTED_EXTENSION_ADAM 1: DRSUAPI_SUPPORTED_EXTENSION_LH_BETA2 0: DRSUAPI_SUPPORTED_EXTENSION_RECYCLE_BIN config_dn_guid : aad7e818-bcf6-4167-bad6-31205141ecba bind_handle : * bind_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : cdd80a8c-7894-4523-8689-75968f5bc035 result : WERR_OK drsuapi_DsAddEntry: struct drsuapi_DsAddEntry in: struct drsuapi_DsAddEntry bind_handle : * bind_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : cdd80a8c-7894-4523-8689-75968f5bc035 level : 0x00000002 (2) req : * req : union drsuapi_DsAddEntryRequest(case 2) req2: struct drsuapi_DsAddEntryRequest2 first_object: struct drsuapi_DsReplicaObjectListItem next_object : NULL object: struct drsuapi_DsReplicaObject identifier : * identifier: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x0000011a (282) __ndr_size_sid : 0x00000000 (0) guid : 00000000-0000-0000-0000-000000000000 sid : S-0-0 __ndr_size_dn : 0x00000070 (112) dn : 'CN=NTDS Settings,CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net' flags : 0x00000000 (0) 0: DRSUAPI_DS_REPLICA_OBJECT_FROM_MASTER 0: DRSUAPI_DS_REPLICA_OBJECT_DYNAMIC 0: DRSUAPI_DS_REPLICA_OBJECT_REMOTE_MODIFY attribute_ctr: struct drsuapi_DsReplicaAttributeCtr num_attributes : 0x0000000a (10) attributes : * attributes: ARRAY(10) attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_objectCategory (0x9030E) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000b8 (184) blob : * blob : DATA_BLOB length=184 [0000] B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 3F 00 00 00 43 00 4E 00 3D 00 4E 00 ....?... C.N.=.N. [0040] 54 00 44 00 53 00 2D 00 44 00 53 00 41 00 2C 00 T.D.S.-. D.S.A.,. [0050] 43 00 4E 00 3D 00 53 00 63 00 68 00 65 00 6D 00 C.N.=.S. c.h.e.m. [0060] 61 00 2C 00 43 00 4E 00 3D 00 43 00 6F 00 6E 00 a.,.C.N. =.C.o.n. [0070] 66 00 69 00 67 00 75 00 72 00 61 00 74 00 69 00 f.i.g.u. r.a.t.i. [0080] 6F 00 6E 00 2C 00 44 00 43 00 3D 00 76 00 32 00 o.n.,.D. C.=.v.2. [0090] 2C 00 44 00 43 00 3D 00 74 00 72 00 69 00 64 00 ,.D.C.=. t.r.i.d. [00A0] 67 00 65 00 6C 00 6C 00 2C 00 44 00 43 00 3D 00 g.e.l.l. ,.D.C.=. [00B0] 6E 00 65 00 74 00 00 00 n.e.t... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_objectClass (0x0) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue attid : 0x0017002f (1507375) attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_msDS_HasDomainNCs (0x9071C) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000076 (118) blob : * blob : DATA_BLOB length=118 [0000] 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 v....... ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 1E 00 00 00 44 00 43 00 3D 00 73 00 ........ D.C.=.s. [0040] 32 00 2C 00 44 00 43 00 3D 00 76 00 32 00 2C 00 2.,.D.C. =.v.2.,. [0050] 44 00 43 00 3D 00 74 00 72 00 69 00 64 00 67 00 D.C.=.t. r.i.d.g. [0060] 65 00 6C 00 6C 00 2C 00 44 00 43 00 3D 00 6E 00 e.l.l.,. D.C.=.n. [0070] 65 00 74 00 00 00 e.t... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_msDS_hasMasterNCs (0x9072C) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000003 (3) values : * values: ARRAY(3) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000076 (118) blob : * blob : DATA_BLOB length=118 [0000] 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 v....... ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 1E 00 00 00 44 00 43 00 3D 00 73 00 ........ D.C.=.s. [0040] 32 00 2C 00 44 00 43 00 3D 00 76 00 32 00 2C 00 2.,.D.C. =.v.2.,. [0050] 44 00 43 00 3D 00 74 00 72 00 69 00 64 00 67 00 D.C.=.t. r.i.d.g. [0060] 65 00 6C 00 6C 00 2C 00 44 00 43 00 3D 00 6E 00 e.l.l.,. D.C.=.n. [0070] 65 00 74 00 00 00 e.t... values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000008c (140) blob : * blob : DATA_BLOB length=140 [0000] 8C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 29 00 00 00 43 00 4E 00 3D 00 43 00 ....)... C.N.=.C. [0040] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [0050] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [0060] 76 00 32 00 2C 00 44 00 43 00 3D 00 74 00 72 00 v.2.,.D. C.=.t.r. [0070] 69 00 64 00 67 00 65 00 6C 00 6C 00 2C 00 44 00 i.d.g.e. l.l.,.D. [0080] 43 00 3D 00 6E 00 65 00 74 00 00 00 C.=.n.e. t... values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000a0 (160) blob : * blob : DATA_BLOB length=160 [0000] A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 33 00 00 00 43 00 4E 00 3D 00 53 00 ....3... C.N.=.S. [0040] 63 00 68 00 65 00 6D 00 61 00 2C 00 43 00 4E 00 c.h.e.m. a.,.C.N. [0050] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0060] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0070] 43 00 3D 00 76 00 32 00 2C 00 44 00 43 00 3D 00 C.=.v.2. ,.D.C.=. [0080] 74 00 72 00 69 00 64 00 67 00 65 00 6C 00 6C 00 t.r.i.d. g.e.l.l. [0090] 2C 00 44 00 43 00 3D 00 6E 00 65 00 74 00 00 00 ,.D.C.=. n.e.t... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_msDS_Behavior_Version (0x905B3) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 04 00 00 00 .... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_systemFlags (0x90177) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 00 00 00 02 .... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_invocationId (0x20073) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000010 (16) blob : * blob : DATA_BLOB length=16 [0000] 06 C1 95 C5 0D 28 49 45 8D 74 1A 7E F8 EE 1B 7A .....(IE .t.~...z attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_hasMasterNCs (0x2000E) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000003 (3) values : * values: ARRAY(3) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000076 (118) blob : * blob : DATA_BLOB length=118 [0000] 76 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 v....... ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 1E 00 00 00 44 00 43 00 3D 00 73 00 ........ D.C.=.s. [0040] 32 00 2C 00 44 00 43 00 3D 00 76 00 32 00 2C 00 2.,.D.C. =.v.2.,. [0050] 44 00 43 00 3D 00 74 00 72 00 69 00 64 00 67 00 D.C.=.t. r.i.d.g. [0060] 65 00 6C 00 6C 00 2C 00 44 00 43 00 3D 00 6E 00 e.l.l.,. D.C.=.n. [0070] 65 00 74 00 00 00 e.t... values: struct drsuapi_DsAttributeValue __ndr_size : 0x0000008c (140) blob : * blob : DATA_BLOB length=140 [0000] 8C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 29 00 00 00 43 00 4E 00 3D 00 43 00 ....)... C.N.=.C. [0040] 6F 00 6E 00 66 00 69 00 67 00 75 00 72 00 61 00 o.n.f.i. g.u.r.a. [0050] 74 00 69 00 6F 00 6E 00 2C 00 44 00 43 00 3D 00 t.i.o.n. ,.D.C.=. [0060] 76 00 32 00 2C 00 44 00 43 00 3D 00 74 00 72 00 v.2.,.D. C.=.t.r. [0070] 69 00 64 00 67 00 65 00 6C 00 6C 00 2C 00 44 00 i.d.g.e. l.l.,.D. [0080] 43 00 3D 00 6E 00 65 00 74 00 00 00 C.=.n.e. t... values: struct drsuapi_DsAttributeValue __ndr_size : 0x000000a0 (160) blob : * blob : DATA_BLOB length=160 [0000] A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0030] 00 00 00 00 33 00 00 00 43 00 4E 00 3D 00 53 00 ....3... C.N.=.S. [0040] 63 00 68 00 65 00 6D 00 61 00 2C 00 43 00 4E 00 c.h.e.m. a.,.C.N. [0050] 3D 00 43 00 6F 00 6E 00 66 00 69 00 67 00 75 00 =.C.o.n. f.i.g.u. [0060] 72 00 61 00 74 00 69 00 6F 00 6E 00 2C 00 44 00 r.a.t.i. o.n.,.D. [0070] 43 00 3D 00 76 00 32 00 2C 00 44 00 43 00 3D 00 C.=.v.2. ,.D.C.=. [0080] 74 00 72 00 69 00 64 00 67 00 65 00 6C 00 6C 00 t.r.i.d. g.e.l.l. [0090] 2C 00 44 00 43 00 3D 00 6E 00 65 00 74 00 00 00 ,.D.C.=. n.e.t... attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_dMDLocation (0x20024) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue string : ' ' attributes: struct drsuapi_DsReplicaAttribute attid : DRSUAPI_ATTID_options (0x90133) value_ctr: struct drsuapi_DsAttributeValueCtr num_values : 0x00000001 (1) values : * values: ARRAY(1) values: struct drsuapi_DsAttributeValue __ndr_size : 0x00000004 (4) blob : * blob : DATA_BLOB length=4 [0000] 01 00 00 00 .... drsuapi_DsAddEntry: struct drsuapi_DsAddEntry out: struct drsuapi_DsAddEntry level_out : * level_out : 0x00000003 (3) ctr : * ctr : union drsuapi_DsAddEntryCtr(case 3) ctr3: struct drsuapi_DsAddEntryCtr3 id : * id: struct drsuapi_DsReplicaObjectIdentifier __ndr_size : 0x0000011a (282) __ndr_size_sid : 0x00000000 (0) guid : 00000000-0000-0000-0000-000000000000 sid : S-0-0 __ndr_size_dn : 0x00000070 (112) dn : 'CN=NTDS Settings,CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net' err_ver : 0x00000001 (1) err_data : * err_data : union drsuapi_DsAddEntry_ErrData(case 1) v1: struct drsuapi_DsAddEntry_ErrData_V1 status : WERR_ACCESS_DENIED dir_err : DRSUAPI_DIRERR_SERVICE (5) info : * info : union drsuapi_DsAddEntryErrorInfo(case 5) service_err: struct drsuapi_DsAddEntryErrorInfoX dsid : 0x01091bf8 (17374200) extended_err : WERR_DS_NO_CROSSREF_FOR_NC extended_data : 0x000020ab (8363) problem : 0x1394 (5012) count : 0x00000000 (0) objects : NULL result : WERR_OK ERROR(runtime): uncaught exception - DsAddEntry failed File "bin/python/samba/netcmd/__init__.py", line 141, in _run return self.run(*args, **kwargs) File "bin/python/samba/netcmd/domain.py", line 123, in run site=site, netbios_name=netbios_name, netbios_domain=netbios_domain, targetdir=targetdir) File "bin/python/samba/join.py", line 847, in join_subdomain ctx.do_join() File "bin/python/samba/join.py", line 722, in do_join ctx.join_add_objects() File "bin/python/samba/join.py", line 415, in join_add_objects ctx.DsAddEntry(rec) File "bin/python/samba/join.py", line 342, in DsAddEntry raise RuntimeError("DsAddEntry failed") Finding a writeable DC for domain 'v2.tridgell.net' Found DC w2k8.v2.tridgell.net checking samaccountname Deleted CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net Adding CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net Adding CN=NTDS Settings,CN=BLU,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=v2,DC=tridgell,DC=net DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8363, 'WERR_DS_NO_CROSSREF_FOR_NC') Join failed - cleaning up
_______________________________________________ cifs-protocol mailing list cifs-protocol@cifs.org https://lists.samba.org/mailman/listinfo/cifs-protocol