Attachment 5714 Details for Bug 33644

ad-takeover.log

ad-takeover.log (text/x-log), 27.46 KB, created by Felix Botner on 2014-01-06 16:08 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Felix Botner

Created: 2014-01-06 16:08 CET

Size: 27.46 KB

patch

obsolete

>2014-01-06 14:07:20,254 
>
>Commandline: /usr/sbin/univention-ad-takeover
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:07:27,211 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:07:28,256 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:07:28,256 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:07:33,934 Error: Cannot connect to ldap://10.200.7.63 as W2K12\Administrator
>       Please check the given credentials.
>2014-01-06 14:07:44,098 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:07:45,119 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:07:45,120 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:07:48,855 Error: Cannot connect to ldap://10.200.7.63 as W2K12\Administrator
>       Please check the given credentials.
>2014-01-06 14:09:14,167 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:09:15,188 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:09:15,188 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:09:19,134 Error: Cannot connect to ldap://10.200.7.63 as W2K12\Administrator
>       Please check the given credentials.
>2014-01-06 14:10:29,020 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:13:11,028 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:13:12,047 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:13:12,047 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:13:14,735 Error: Cannot connect to ldap://10.200.7.63 as W2K12\Administrator
>       Please check the given credentials.
>2014-01-06 14:13:17,417 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:13:18,443 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:13:18,444 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:13:21,314 Error: Cannot connect to ldap://10.200.7.63 as W2K12\Administrator
>       Please check the given credentials.
>2014-01-06 14:14:12,609 
>
>Commandline: /usr/sbin/univention-ad-takeover 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:14:13,632 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:14:13,633 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:15:09,711 
>
>Commandline: /usr/sbin/univention-ad-takeover -U Administrateur 10.200.7.63
>Version: 8.0.33-8.434.201312121734
>2014-01-06 14:15:10,732 output of ['dig', '@localhost', 'PTR', '63.7.200.10.in-addr.arpa', '+short']
>stdout: ''
>stderr: ''
>2014-01-06 14:15:10,732 Ok, Server IP 10.200.7.63 is online.
>2014-01-06 14:15:13,286 output of ['dig', '@10.200.7.63', 'SRV', '_kerberos._tcp.dc._msdcs.w2k12.test', '+short']
>stdout: '0 100 88 win-270vd8dd5to.w2k12.test.'
>stderr: ''
>2014-01-06 14:15:13,286 Sucessfull determined AD DC FQDN win-270vd8dd5to.w2k12.test for given IP 10.200.7.63
>2014-01-06 14:15:13,288 Located server win-270vd8dd5to.w2k12.test at AD site Default-First-Site-Name in AD SAM database.
>2014-01-06 14:15:13,289 NTP Response received from server 10.200.7.63
>2014-01-06 14:15:13,289 The local clock differs from the clock on 10.200.7.63 by about 0 seconds.
>2014-01-06 14:15:13,290 The offest is less than three minutes, that should be good enough for Kerberos.
>2014-01-06 14:15:13,297 Found Account Administrateur with well known RID 500 (Administrator)
>2014-01-06 14:15:13,298 Found Account InvitÃ© with well known RID 501 (Guest)
>2014-01-06 14:15:13,298 Found Account krbtgt with well known RID 502 (KRBTGT)
>2014-01-06 14:15:13,298 Number of AD user accounts: 3
>2014-01-06 14:15:13,298 Number of ignored system accounts: 3
>2014-01-06 14:15:13,337 check_license for current UCS Users: 0 of 5
>2014-01-06 14:15:13,338   4 Systemaccounts are ignored.
>2014-01-06 14:15:13,338 Found 3 user objects on the remote server.
>2014-01-06 14:15:13,338 Starting phase I of the takeover process.
>2014-01-06 14:15:13,338 Calling: univention-config-registry set hosts/static/10.200.7.63=win-270vd8dd5to.w2k12.test win-270vd8dd5to
>2014-01-06 14:15:13,520 Create hosts/static/10.200.7.63
>2014-01-06 14:15:13,521 Multifile: /etc/hosts
>2014-01-06 14:15:13,525 Calling: /etc/init.d/univention-s4-connector stop
>2014-01-06 14:15:13,529 Stopping univention-s4-connector daemon.
>2014-01-06 14:15:13,554 done.
>2014-01-06 14:15:13,554 Calling: /etc/init.d/samba4 stop
>2014-01-06 14:15:15,819 Stopping Samba AD DC daemon: samba. nmbd.
>2014-01-06 14:15:15,820 Calling: univention-config-registry set nameserver1/local=10.200.7.50 nameserver1=10.200.7.63 directory/manager/web/modules/users/user/properties/username/syntax=string directory/manager/web/modules/groups/group/properties/name/syntax=string dns/backend=ldap
>2014-01-06 14:15:15,982 Create nameserver1/local
>2014-01-06 14:15:15,983 Setting nameserver1
>2014-01-06 14:15:15,983 Create directory/manager/web/modules/users/user/properties/username/syntax
>2014-01-06 14:15:15,983 Create directory/manager/web/modules/groups/group/properties/name/syntax
>2014-01-06 14:15:15,983 Setting dns/backend
>2014-01-06 14:15:15,983 File: /etc/resolv.conf
>2014-01-06 14:15:16,001 Calling: /etc/init.d/nscd stop
>2014-01-06 14:15:16,010 Stopping NSCD:.
>2014-01-06 14:15:16,010 Calling: /etc/init.d/bind9 restart
>2014-01-06 14:15:16,207 Restarting bind9 daemon: .
>2014-01-06 14:15:22,099 done.
>2014-01-06 14:15:22,099 Starting Samba domain join.
>2014-01-06 14:15:22,284 SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT failed: NT_STATUS_NO_LOGON_SERVERS
>2014-01-06 14:15:22,491 SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT failed: NT_STATUS_NO_LOGON_SERVERS
>2014-01-06 14:15:22,959 workgroup is W2K12
>2014-01-06 14:15:22,959 realm is w2k12.test
>2014-01-06 14:15:22,959 checking sAMAccountName
>2014-01-06 14:15:22,959 Adding CN=MASTER,OU=Domain Controllers,DC=w2k12,DC=test
>2014-01-06 14:15:22,959 Adding CN=MASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k12,DC=test
>2014-01-06 14:15:22,960 Adding CN=NTDS Settings,CN=MASTER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k12,DC=test
>2014-01-06 14:15:22,960 Adding SPNs to CN=MASTER,OU=Domain Controllers,DC=w2k12,DC=test
>2014-01-06 14:15:22,960 Setting account password for MASTER$
>2014-01-06 14:15:22,960 Enabling account
>2014-01-06 14:15:22,960 Calling bare provision
>2014-01-06 14:15:22,960 No IPv6 address will be assigned
>2014-01-06 14:15:22,962 WARNING: No path in service IPC$ - making it unavailable!
>2014-01-06 14:15:22,962 NOTE: Service IPC$ is flagged unavailable.
>2014-01-06 14:15:24,648 SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT failed: NT_STATUS_NO_LOGON_SERVERS
>2014-01-06 14:15:24,913 Schema-DN[CN=Schema,CN=Configuration,DC=w2k12,DC=test] objects[402] linked_values[0]
>2014-01-06 14:15:25,098 Schema-DN[CN=Schema,CN=Configuration,DC=w2k12,DC=test] objects[804] linked_values[0]
>2014-01-06 14:15:25,398 Schema-DN[CN=Schema,CN=Configuration,DC=w2k12,DC=test] objects[1206] linked_values[0]
>2014-01-06 14:15:25,576 Schema-DN[CN=Schema,CN=Configuration,DC=w2k12,DC=test] objects[1608] linked_values[0]
>2014-01-06 14:15:25,602 Schema-DN[CN=Schema,CN=Configuration,DC=w2k12,DC=test] objects[1688] linked_values[0]
>2014-01-06 14:15:25,603 Analyze and apply schema objects
>2014-01-06 14:15:26,149 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908BA
>2014-01-06 14:15:26,153 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090852
>2014-01-06 14:15:26,155 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090877
>2014-01-06 14:15:26,174 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090886
>2014-01-06 14:15:26,178 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908A5
>2014-01-06 14:15:26,184 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090838
>2014-01-06 14:15:26,184 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088F
>2014-01-06 14:15:26,185 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090877
>2014-01-06 14:15:26,190 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090831
>2014-01-06 14:15:26,190 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D
>2014-01-06 14:15:26,190 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D
>2014-01-06 14:15:26,191 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090837
>2014-01-06 14:15:26,191 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090823
>2014-01-06 14:15:26,192 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009083B
>2014-01-06 14:15:26,192 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090850
>2014-01-06 14:15:26,192 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090866
>2014-01-06 14:15:26,193 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009086A
>2014-01-06 14:15:26,193 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090879
>2014-01-06 14:15:26,193 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009087A
>2014-01-06 14:15:26,193 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090894
>2014-01-06 14:15:26,194 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090832
>2014-01-06 14:15:26,194 ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088D
>2014-01-06 14:15:26,206 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D
>2014-01-06 14:15:26,206 ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D
>2014-01-06 14:15:27,822 Partition[CN=Configuration,DC=w2k12,DC=test] objects[402] linked_values[0]
>2014-01-06 14:15:28,463 Partition[CN=Configuration,DC=w2k12,DC=test] objects[804] linked_values[0]
>2014-01-06 14:15:29,036 Partition[CN=Configuration,DC=w2k12,DC=test] objects[1206] linked_values[0]
>2014-01-06 14:15:29,958 Partition[CN=Configuration,DC=w2k12,DC=test] objects[1608] linked_values[0]
>2014-01-06 14:15:30,473 Partition[CN=Configuration,DC=w2k12,DC=test] objects[1788] linked_values[22]
>2014-01-06 14:15:30,760 Partition[DC=w2k12,DC=test] objects[108] linked_values[26]
>2014-01-06 14:15:31,128 Partition[DC=w2k12,DC=test] objects[372] linked_values[32]
>2014-01-06 14:15:31,859 Partition[DC=DomainDnsZones,DC=w2k12,DC=test] objects[36] linked_values[0]
>2014-01-06 14:15:31,928 Partition[DC=ForestDnsZones,DC=w2k12,DC=test] objects[18] linked_values[0]
>2014-01-06 14:15:31,967 Partition[DC=ForestDnsZones,DC=w2k12,DC=test] objects[36] linked_values[0]
>2014-01-06 14:15:33,714 descriptor_sd_propagation_recursive: DC=DomainDnsZones,DC=w2k12,DC=test not found under DC=w2k12,DC=test
>2014-01-06 14:15:33,715 descriptor_sd_propagation_recursive: DC=ForestDnsZones,DC=w2k12,DC=test not found under DC=w2k12,DC=test
>2014-01-06 14:15:34,829 Provision OK for domain DN DC=w2k12,DC=test
>2014-01-06 14:15:34,829 Starting replication
>2014-01-06 14:15:34,830 Replicating critical objects from the base DN of the domain
>2014-01-06 14:15:34,830 Done with always replicated NC (base, config, schema)
>2014-01-06 14:15:34,830 Replicating DC=DomainDnsZones,DC=w2k12,DC=test
>2014-01-06 14:15:34,830 Replicating DC=ForestDnsZones,DC=w2k12,DC=test
>2014-01-06 14:15:34,830 Committing SAM database
>2014-01-06 14:15:34,830 Sending DsReplicateUpdateRefs for all the replicated partitions
>2014-01-06 14:15:34,831 Setting isSynchronized and dsServiceName
>2014-01-06 14:15:34,831 Setting up secrets database
>2014-01-06 14:15:34,831 Joined domain W2K12 (SID S-1-5-21-783941786-3613876442-1044395446) as a DC
>2014-01-06 14:15:34,865 Samba domain join successful.
>2014-01-06 14:15:35,043 Replacing old UCS sambaSID (S-1-5-21-3746100450-113509357-4236447858) by AD domain SID (S-1-5-21-783941786-3613876442-1044395446).
>2014-01-06 14:15:35,378 Calling: samba-tool user setexpiry --noexpiry --filter (&(objectclass=computer)(serverReferenceBL=*))
>2014-01-06 14:15:35,724 ERROR: Failed to set expiry for user '(&(objectclass=computer)(serverReferenceBL=*))':
>2014-01-06 14:15:37,751 Calling: univention-config-registry set samba4/dcerpc/endpoint/drsuapi=false
>2014-01-06 14:15:38,235 Create samba4/dcerpc/endpoint/drsuapi
>2014-01-06 14:15:38,235 Multifile: /etc/samba/smb.conf
>2014-01-06 14:15:38,241 Calling: sed -i /-drsuapi/!s/$\s*dcerpc endpoint servers\s*=\s*.*$$/\1 -drsuapi/ /etc/samba/smb.conf
>2014-01-06 14:15:38,265 Calling: /etc/init.d/samba4 start
>2014-01-06 14:15:38,735 Starting Samba AD DC daemon: samba nmbd.
>2014-01-06 14:15:39,786 Creating OUs in the Univention Directory Manager
>2014-01-06 14:15:39,787 Calling: /usr/sbin/univention-directory-manager container/ou create --ignore_exists --position dc=w2k12,dc=test --set name=Domain Controllers
>2014-01-06 14:15:40,885 Object exists: ou=Domain Controllers,dc=w2k12,dc=test
>2014-01-06 14:15:40,924 Renaming 'cn=Users,cn=Builtin,dc=w2k12,dc=test' to 'Utilisateurs' in UCS LDAP.
>2014-01-06 14:15:40,950 Renaming 'cn=Administrators,cn=Builtin,dc=w2k12,dc=test' to 'Administrateurs' in UCS LDAP.
>2014-01-06 14:15:41,031 Renaming 'cn=Guests,cn=Builtin,dc=w2k12,dc=test' to 'InvitÃ©s' in UCS LDAP.
>2014-01-06 14:15:41,051 Renaming 'cn=Server Operators,cn=Builtin,dc=w2k12,dc=test' to 'OpÃ©rateurs de serveur' in UCS LDAP.
>2014-01-06 14:15:41,108 Renaming 'cn=Windows Authorization Access Group,cn=Builtin,dc=w2k12,dc=test' to 'Groupe dâaccÃ¨s dâautorisation Windows' in UCS LDAP.
>2014-01-06 14:15:41,149 Renaming 'cn=Performance Log Users,cn=Builtin,dc=w2k12,dc=test' to 'Utilisateurs du journal de performances' in UCS LDAP.
>2014-01-06 14:15:41,172 Renaming 'cn=Cryptographic Operators,cn=Builtin,dc=w2k12,dc=test' to 'OpÃ©rateurs de chiffrement' in UCS LDAP.
>2014-01-06 14:15:41,188 Renaming 'cn=Replicator,cn=Builtin,dc=w2k12,dc=test' to 'Duplicateurs' in UCS LDAP.
>2014-01-06 14:15:41,210 Renaming 'cn=Network Configuration Operators,cn=Builtin,dc=w2k12,dc=test' to 'OpÃ©rateurs de configuration rÃ©seau' in UCS LDAP.
>2014-01-06 14:15:41,357 Renaming 'cn=Backup Operators,cn=Builtin,dc=w2k12,dc=test' to 'OpÃ©rateurs de sauvegarde' in UCS LDAP.
>2014-01-06 14:15:41,434 Renaming 'cn=Incoming Forest Trust Builders,cn=Builtin,dc=w2k12,dc=test' to 'GÃ©nÃ©rateurs dâapprobations de forÃªt entrante' in UCS LDAP.
>2014-01-06 14:15:41,462 Renaming 'cn=Pre-Windows 2000 Compatible Access,cn=Builtin,dc=w2k12,dc=test' to 'AccÃ¨s compatible prÃ©-Windows 2000' in UCS LDAP.
>2014-01-06 14:15:41,486 Renaming 'cn=Distributed COM Users,cn=Builtin,dc=w2k12,dc=test' to 'Utilisateurs du modÃ¨le COM distribuÃ©' in UCS LDAP.
>2014-01-06 14:15:41,527 Renaming 'cn=Terminal Server License Servers,cn=Builtin,dc=w2k12,dc=test' to 'Serveurs de licences des services Terminal Server' in UCS LDAP.
>2014-01-06 14:15:41,555 Renaming 'cn=Account Operators,cn=Builtin,dc=w2k12,dc=test' to 'OpÃ©rateurs de compte' in UCS LDAP.
>2014-01-06 14:15:41,582 Renaming 'cn=Remote Desktop Users,cn=Builtin,dc=w2k12,dc=test' to 'Utilisateurs du Bureau Ã  distance' in UCS LDAP.
>2014-01-06 14:15:41,602 Renaming 'cn=Event Log Readers,cn=Builtin,dc=w2k12,dc=test' to 'Lecteurs des journaux dâÃ©vÃ©nements' in UCS LDAP.
>2014-01-06 14:15:41,637 Renaming 'cn=Certificate Service DCOM Access,cn=Builtin,dc=w2k12,dc=test' to 'AccÃ¨s DCOM service de certificats' in UCS LDAP.
>2014-01-06 14:15:41,669 Renaming 'cn=Performance Monitor Users,cn=Builtin,dc=w2k12,dc=test' to 'Utilisateurs de lâAnalyseur de performances' in UCS LDAP.
>2014-01-06 14:15:41,687 Calling: univention-config-registry set connector/s4/mapping/user/ignorelist=root,pcpatch,ucs-s4sync,Gast,Guest
>2014-01-06 14:15:42,008 Setting connector/s4/mapping/user/ignorelist
>2014-01-06 14:15:42,026 Rewriting user master$ SID S-1-5-21-3746100450-113509357-4236447858-1000 to S-1-5-21-783941786-3613876442-1044395446-1108
>2014-01-06 14:15:42,048 Rewriting user krbtgt SID S-1-5-21-3746100450-113509357-4236447858-502 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,061 Rewriting group 'Domain Admins' SID S-1-5-21-3746100450-113509357-4236447858-512 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,070 Rewriting group 'Domain Users' SID S-1-5-21-3746100450-113509357-4236447858-513 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,082 Rewriting group 'Domain Guests' SID S-1-5-21-3746100450-113509357-4236447858-514 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,089 Rewriting group 'Windows Hosts' SID S-1-5-21-3746100450-113509357-4236447858-11011 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,099 Rewriting group 'DC Backup Hosts' SID S-1-5-21-3746100450-113509357-4236447858-1109 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,106 Rewriting group 'DC Slave Hosts' SID S-1-5-21-3746100450-113509357-4236447858-1108 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,114 Rewriting group 'Computers' SID S-1-5-21-3746100450-113509357-4236447858-1103 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,121 Rewriting group 'Backup Join' SID S-1-5-21-3746100450-113509357-4236447858-1106 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,130 Rewriting group 'Slave Join' SID S-1-5-21-3746100450-113509357-4236447858-1104 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,134 Rewriting group 'Group Policy Creator Owners' SID S-1-5-21-3746100450-113509357-4236447858-520 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,142 Rewriting group 'Enterprise Read-Only Domain Controllers' SID S-1-5-21-3746100450-113509357-4236447858-498 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,150 Rewriting group 'Enterprise Admins' SID S-1-5-21-3746100450-113509357-4236447858-519 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,158 Rewriting group 'Denied RODC Password Replication Group' SID S-1-5-21-3746100450-113509357-4236447858-572 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,162 Rewriting group 'Allowed RODC Password Replication Group' SID S-1-5-21-3746100450-113509357-4236447858-571 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,174 Rewriting group 'Schema Admins' SID S-1-5-21-3746100450-113509357-4236447858-518 to S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:15:42,179 Rewriting group 'DnsAdmins' SID S-1-5-21-3746100450-113509357-4236447858-1101 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,190 Rewriting group 'Domain Controllers' SID S-1-5-21-3746100450-113509357-4236447858-516 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,195 Rewriting group 'Read-Only Domain Controllers' SID S-1-5-21-3746100450-113509357-4236447858-521 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,206 Rewriting group 'Domain Computers' SID S-1-5-21-3746100450-113509357-4236447858-515 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,211 Rewriting group 'Cert Publishers' SID S-1-5-21-3746100450-113509357-4236447858-517 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,345 Rewriting group 'RAS and IAS Servers' SID S-1-5-21-3746100450-113509357-4236447858-553 to S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:15:42,388 Rewriting group 'DnsUpdateProxy' SID S-1-5-21-3746100450-113509357-4236447858-1102 to S-1-5-21-783941786-3613876442-1044395446-1103
>2014-01-06 14:15:42,975 Attempting removal of DNS SPN account in UCS-LDAP, will be recreated later with new password.
>2014-01-06 14:15:42,975 Calling: univention-directory-manager users/user delete --dn uid=dns-master,cn=users,dc=w2k12,dc=test
>2014-01-06 14:15:43,197 Object removed: uid=dns-master,cn=users,dc=w2k12,dc=test
>2014-01-06 14:15:43,213 Attempting removal of Zarafa and Squid SPN accounts in UCS-LDAP, will be recreated later with new password.
>2014-01-06 14:15:43,214 Calling: univention-directory-manager users/user delete --dn uid=zarafa-master,cn=users,dc=w2k12,dc=test
>2014-01-06 14:15:43,421 E: object not found
>2014-01-06 14:15:43,437 Calling: univention-directory-manager users/user delete --dn uid=http-master,cn=users,dc=w2k12,dc=test
>2014-01-06 14:15:43,637 E: object not found
>2014-01-06 14:15:43,645 Calling: univention-directory-manager users/user delete --dn uid=http-proxy-master,cn=users,dc=w2k12,dc=test
>2014-01-06 14:15:43,845 E: object not found
>2014-01-06 14:15:43,862 Calling: univention-config-registry set connector/s4/poll/sleep=1 connector/s4/retryrejected=2
>2014-01-06 14:15:44,132 Setting connector/s4/poll/sleep
>2014-01-06 14:15:44,133 Setting connector/s4/retryrejected
>2014-01-06 14:15:44,141 Calling: /usr/share/univention-s4-connector/msgpo.py --write2ucs
>2014-01-06 14:15:44,881 Set msGPOLink for UCS object (ou=domain controllers,dc=w2k12,dc=test)
>2014-01-06 14:15:44,881 Set msGPOLink for UCS object (dc=w2k12,dc=test)
>2014-01-06 14:15:44,913 Waiting for listener to finish (max. 90 seconds)
>2014-01-06 14:16:13,262 Restarting Univention Directory Listener
>2014-01-06 14:16:13,263 Calling: /etc/init.d/univention-directory-listener stop
>2014-01-06 14:16:13,270 Stopping univention-directory-listener daemon.
>2014-01-06 14:16:13,277 done.
>2014-01-06 14:16:23,291 Calling: /etc/init.d/univention-directory-listener start
>2014-01-06 14:16:23,331 Starting univention-directory-listener daemon.
>2014-01-06 14:16:23,333 done.
>2014-01-06 14:16:23,333 Calling: logrotate -f /etc/logrotate.d/univention-s4-connector
>2014-01-06 14:16:23,409 start-stop-daemon: warning: failed to kill 6859: No such process
>2014-01-06 14:16:27,951 Starting S4 Connector
>2014-01-06 14:16:27,952 Calling: /etc/init.d/univention-s4-connector start
>2014-01-06 14:16:28,010 Starting univention-s4-connector daemon.
>2014-01-06 14:16:28,011 failed.
>2014-01-06 14:16:28,011 Waiting for S4 Connector sync
>2014-01-06 14:16:28,012 Progress details are logged to /var/log/univention/connector-s4-status.log
>2014-01-06 14:17:41,554 Calling: univention-config-registry set connector/s4/poll/sleep=5 connector/s4/retryrejected=10
>2014-01-06 14:17:41,693 Setting connector/s4/poll/sleep
>2014-01-06 14:17:41,693 Setting connector/s4/retryrejected
>2014-01-06 14:17:41,697 Calling: /etc/init.d/univention-s4-connector restart
>2014-01-06 14:17:41,703 Stopping univention-s4-connector daemon.
>2014-01-06 14:17:41,708 done.
>2014-01-06 14:17:43,744 Starting univention-s4-connector daemon.
>2014-01-06 14:17:46,571 done.
>2014-01-06 14:17:46,574 Calling: /usr/lib/univention-directory-listener/system/samba4-idmap.py --direct-resync
>2014-01-06 14:17:46,747 06.01.14 14:17:46.746  DEBUG_INIT
>2014-01-06 14:17:47,301 06.01.14 14:17:47.301  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:17:47,362 06.01.14 14:17:47.362  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-32-550
>2014-01-06 14:17:47,412 06.01.14 14:17:47.412  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-5-21-783941786-3613876442-1044395446-1603
>2014-01-06 14:17:47,466 06.01.14 14:17:47.466  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-11
>2014-01-06 14:17:47,478 06.01.14 14:17:47.478  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-1
>2014-01-06 14:17:47,481 06.01.14 14:17:47.481  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-1-0
>2014-01-06 14:17:47,504 06.01.14 14:17:47.504  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-0
>2014-01-06 14:17:47,516 06.01.14 14:17:47.516  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-0-0
>2014-01-06 14:17:47,528 06.01.14 14:17:47.528  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-9
>2014-01-06 14:17:47,540 06.01.14 14:17:47.540  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-14
>2014-01-06 14:17:47,552 06.01.14 14:17:47.552  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-64-14
>2014-01-06 14:17:47,562 06.01.14 14:17:47.562  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-64-21
>2014-01-06 14:17:47,576 06.01.14 14:17:47.576  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-13
>2014-01-06 14:17:47,595 06.01.14 14:17:47.595  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-64-10
>2014-01-06 14:17:47,610 06.01.14 14:17:47.610  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-1000
>2014-01-06 14:17:47,622 06.01.14 14:17:47.622  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-15
>2014-01-06 14:17:47,626 06.01.14 14:17:47.626  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-5-7
>2014-01-06 14:17:47,649 06.01.14 14:17:47.649  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-20
>2014-01-06 14:17:47,662 06.01.14 14:17:47.662  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-3-1
>2014-01-06 14:17:47,674 06.01.14 14:17:47.674  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-3-0
>2014-01-06 14:17:47,688 06.01.14 14:17:47.688  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-19
>2014-01-06 14:17:47,701 06.01.14 14:17:47.701  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-3-4
>2014-01-06 14:17:47,719 06.01.14 14:17:47.719  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-4
>2014-01-06 14:17:47,732 06.01.14 14:17:47.732  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-12
>2014-01-06 14:17:47,737 06.01.14 14:17:47.737  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-5-2
>2014-01-06 14:17:47,760 06.01.14 14:17:47.760  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-6
>2014-01-06 14:17:47,884 06.01.14 14:17:47.884  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-1
>2014-01-06 14:17:47,898 06.01.14 14:17:47.898  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-18
>2014-01-06 14:17:47,913 06.01.14 14:17:47.913  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-3
>2014-01-06 14:17:47,926 06.01.14 14:17:47.926  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-8
>2014-01-06 14:17:47,941 06.01.14 14:17:47.941  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-17
>2014-01-06 14:17:47,954 06.01.14 14:17:47.954  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-10
>2014-01-06 14:17:48,153 06.01.14 14:17:48.152  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-21-3746100450-113509357-4236447858-501
>2014-01-06 14:17:48,184 06.01.14 14:17:48.181  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-21-783941786-3613876442-1044395446-1102
>2014-01-06 14:17:48,217 06.01.14 14:17:48.217  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-5-21-783941786-3613876442-1044395446-1617
>2014-01-06 14:17:48,249 06.01.14 14:17:48.248  LISTENER    ( PROCESS ) : samba4-idmap: modifying entry for S-1-5-21-783941786-3613876442-1044395446-502
>2014-01-06 14:17:48,424 06.01.14 14:17:48.421  LISTENER    ( PROCESS ) : samba4-idmap: added entry for S-1-5-32-568
>2014-01-06 14:17:49,021 Calling: /etc/init.d/nscd start
>2014-01-06 14:17:49,060 Starting NSCD:.
>2014-01-06 14:17:49,060 Calling: univention-config-registry set univention/ad/takeover/ad/server/ip=10.200.7.63
>2014-01-06 14:17:49,192 Create univention/ad/takeover/ad/server/ip
>2014-01-06 14:17:49,199 
>Phase I finished.
>2014-01-06 14:17:49,208 Now the SYSVOL share should be copied manually from \\win-270vd8dd5to\sysvol to \\master\sysvol (e.g. using robocopy):
>
>	robocopy /mir /sec /z \\win-270vd8dd5to\sysvol \\master\sysvol
>
>Once the SYSVOL share is copied successfully, shutdown the Windows server win-270vd8dd5to.w2k12.test.

Actions: View

Attachments on bug 33644: 5714 | 5715