Мар 162019
 

Потребовалось обновить debian со stretch до buster. После этого перестал функционировать конролер домена на базе samba

Симптом:

кусок лога
[2019/03/16 10:52:03.821601,  0] ../source4/smbd/server.c:696(binary_smbd_main)
  binary_smbd_main: samba: using 'standard' process model
[2019/03/16 10:52:03.876332,  0] ../source4/dsdb/common/util.c:1815(samdb_reference_dn_is_our_ntdsa)
  Failed to find object DC=san,DC=loc for attribute fsmoRoleOwner - Cannot find DN DC=san,DC=loc to get attribute fsmoRoleOwner for reference dn: No such Base DN: DC=san,DC=loc
[2019/03/16 10:52:03.884926,  0] ../source4/smbd/service_task.c:36(task_server_terminate)
  task_server_terminate: task_server_terminate: [kdc: krb5_init_context samdb RODC connect failed]
[2019/03/16 10:52:03.900333,  0] ../source4/smbd/service_task.c:36(task_server_terminate)
  task_server_terminate: task_server_terminate: [dreplsrv: Failed to connect to local samdb: WERR_DS_UNAVAILABLE
  ]
[2019/03/16 10:52:03.924580,  0] ../source4/smbd/service_task.c:36(task_server_terminate)
  task_server_terminate: task_server_terminate: [kccsrv: Failed to connect to local samdb: WERR_DS_UNAVAILABLE
  ]
[2019/03/16 10:52:03.944587,  0] ../source4/dsdb/dns/dns_update.c:127(dnsupdate_rebuild)
[2019/03/16 10:52:03.953071,  0] ../source4/smbd/service_task.c:36(task_server_terminate)
  task_server_terminate: task_server_terminate: [dns: failed to load DNS zones]
  ../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error code 110
[2019/03/16 10:53:03.984364,  0] ../source4/dsdb/dns/dns_update.c:127(dnsupdate_rebuild)
[2019/03/16 10:59:42.734319,  0] ../source4/smbd/process_standard.c:81(sigterm_signal_handler)
  sigterm_signal_handler: Exiting pid 17479 on SIGTERM
[2019/03/16 10:59:42.734589,  0] ../source4/smbd/process_standard.c:81(sigterm_signal_handler)
  sigterm_signal_handler: Exiting pid 17473 on SIGTERM
  ../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=loc../source4/dsdb/dns/dns_update.c:127: Unable to find DCs list - No such Base DN: CN=Configuration,DC=san,DC=locsigterm_signal_handler: Exiting pid 17478 on SIGTERM

В инет нашлась такая фигня:

https://lists.samba.org/archive/samba/2018-December/220113.html

I wonder if your old Samba was <= 4.7.x. A new GUID index mode was
introduced at 4.8.0, but this should just slow things down at first
start up.

 

Мне не удалось победить, пришлось откатиться. Нужно, чтобы команда

apt-get -t stretch install samba winbind acl libnss-winbind libpam-winbind ldb-tools smbclient cifs-utils

отработала без ошибок. То есть, сначала удаляем все пакеты из этой строки (apt-get remove), затем удаляем все автозависимости (apt autoremove), потом заново ставим.