Univention Corporate Server (UCS)다음에서 Active Directory를 사용하고 인수해 보십시오 .Windows Server 2008 R2
다음 지침을 따르십시오.
https://docs.software-univention.de/manual-4.2.html#windows:adtakeover
부분:9.4. Migrating an Active Directory domain to UCS using Univention AD Takeover
UCS새 서버에서 다음 매개변수와 동일한 값을 설정했습니다 .Windows Server 2008 R2
- DNS 도메인 이름
- NetBIOS 도메인 이름
- Kerberos 영역
- LDAP 기본 DN
다음 명령을 실행해야 하는 지점에 도달했습니다.
> robocopy /mir /sec /z \\DLDC\sysvol \\ucsdc\sysvol
Windows Server 2008 R2관리자 로서 .
위 명령은 성공적으로 완료되었으며 출력은 다음과 같습니다.
-------------------------------------------------------------------------------
ROBOCOPY :: Robust File Copy for Windows
-------------------------------------------------------------------------------
Started : Fri Sep 15 09:22:19 2017
Source : \\DLDC\sysvol\
Dest : \\ucsdc\sysvol\
Files : *.*
Options : *.* /S /E /COPY:DATS /PURGE /MIR /Z /R:1000000 /W:30
------------------------------------------------------------------------------
1 \\DLDC\sysvol\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\DfsrPrivate\
New File 98 ConflictAndDeletedManifest.xml
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\DfsrPrivate\ConflictAndDeleted\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\DfsrPrivate\Deleted\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\DfsrPrivate\Installing\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\
New File 27 GPT.INI
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm\
New File 50768 wuau.adm
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\
New File 5034 Registry.pol
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Applications\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT\SecEdit\
New File 1098 GptTmpl.inf
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Scripts\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Scripts\Shutdown\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Scripts\Startup\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Applications\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Documents & Settings\
New Dir 2 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Scripts\
New File 6 psscripts.ini
0%
100%
New File 212 scripts.ini
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Scripts\Logoff\
New Dir 2 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Scripts\Logon\
New File 62 default-drives-map.bat
0%
100%
New File 144 home-directory-map.vbs
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\
New File 23 GPT.INI
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\
New File 8 Registry.pol
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Applications\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT\SecEdit\
New File 3552 GptTmpl.inf
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Scripts\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Scripts\Shutdown\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Scripts\Startup\
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\USER\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{A99FB5BE-989E-407D-81C2-8E0563980EDE}\
New File 84 GPT.INI
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{A99FB5BE-989E-407D-81C2-8E0563980EDE}\Machine\
New File 8734 Registry.pol
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{A99FB5BE-989E-407D-81C2-8E0563980EDE}\User\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{CAD2E82F-9501-4507-8676-ACCF1DEB9820}\
New File 116 GPT.INI
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{CAD2E82F-9501-4507-8676-ACCF1DEB9820}\Machine\
New File 9466 Registry.pol
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{CAD2E82F-9501-4507-8676-ACCF1DEB9820}\User\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{FC6F93DA-46C2-4DE4-8FF3-F3994E796F9F}\
New File 81 GPT.INI
0%
100%
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{FC6F93DA-46C2-4DE4-8FF3-F3994E796F9F}\Machine\
New File 7737 Registry.pol
0%
100%
New Dir 0 \\DLDC\sysvol\MYDOMAIN.intranet\Policies\{FC6F93DA-46C2-4DE4-8FF3-F3994E796F9F}\User\
New Dir 1 \\DLDC\sysvol\MYDOMAIN.intranet\scripts\
New File 6148 .DS_Store
0%
99%
------------------------------------------------------------------------------
Total Copied Skipped Mismatch FAILED Extras
Dirs : 43 42 1 0 0 0
Files : 20 19 1 0 0 0
Bytes : 97.2 k 91.2 k 6.0 k 0 0 0
Times : 0:00:02 0:00:00 0:00:00 0:00:01
Speed : 125198 Bytes/sec.
Speed : 7.163 MegaBytes/min.
Ended : Fri Sep 15 09:22:21 2017
그런 다음 "다음" 버튼을 클릭했지만 다음 오류가 발생합니다.
"Could not fulfill the request. Server error message: At least one GPO is still missing in SYSVOL."
다음과 같이:
Univention 로그에서 /var/log/univention/ad-takeover.log다음을 얻습니다.
2017-09-14 21:19:24,268 GPO missing in SYSVOL: {31B2F340-016D-11D2-945F-00C04FB984F9}
2017-09-14 21:19:24,268 At least one GPO is still missing in SYSVOL.
그런 다음 다음 URL의 권장 사항을 통해:
http://www.tecmint.com/samba4-ad-dc-sysvol-replication/
다음 명령을 시도했습니다.
# samba-tool ntacl sysvolcheck # first check
# samba-tool ntacl sysvolreset # the reset
# samba-tool ntacl sysvolcheck # second check
첫 번째 검사에는 오류가 있지만 두 번째 검사에는 오류가 없습니다.
오류는 다음과 같습니다.
root@ucsdc:~# samba-tool ntacl sysvolcheck
ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on sysvol directory /var/lib/samba/sysvol/mydomain.intranet O:LAG:SYD:AI(A;OICIID;0x001200a9;;;AU)(A;OICIID;0x001200a9;;;SO)(A;OICIID;0x001e01bf;;;BA)(A;OICIID;0x001f01ff;;;SY)(A;ID;0x001e01bf;;;LA)(A;OICIIOID;0x001e01bf;;;CO) does not match expected value O:LAG:BAD:P(A;OICI;0x001f01ff;;;BA)(A;OICI;0x001200a9;;;SO)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU) from provision
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run
return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/ntacl.py", line 270, in run
lp)
File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", line 1737, in checksysvolacl
raise ProvisioningError('%s ACL on sysvol directory %s %s does not match expected value %s from provision' % (acl_type(direct_db_access), dir_path, fsacl_sddl, SYSVOL_ACL))
재설정하기 전에 나는 다음을 수행했습니다.
root@ucsdc:/var/lib/samba/sysvol/mydomain.intranet/Policies# ls -la
total 56
drwxrwx---+ 7 Administrator System 4096 Sep 14 20:54 .
drwxrwx---+ 5 Administrator System 4096 Sep 14 21:00 ..
drwxrwx---+ 5 Administrator System 4096 Sep 14 20:54 {31B2F340-016D-11D2-945F-00C04FB984F9}
drwxrwx---+ 4 Administrator System 4096 Sep 14 20:54 {6AC1786C-016F-11D2-945F-00C04fB984F9}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 20:54 {A99FB5BE-989E-407D-81C2-8E0563980EDE}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 20:54 {CAD2E82F-9501-4507-8676-ACCF1DEB9820}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 20:54 {FC6F93DA-46C2-4DE4-8FF3-F3994E796F9F}
재설정 후:
root@ucsdc:~# ls -la /var/lib/samba/sysvol/mydomain.intranet/Policies/
total 56
drwxrwx---+ 7 Administrator Administrators 4096 Sep 14 21:18 .
drwxrwx---+ 5 Administrator Administrators 4096 Sep 14 21:18 ..
drwxrwx---+ 5 Administrator Domain Admins 4096 Sep 14 21:18 {31B2F340-016D-11D2-945F-00C04FB984F9}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 21:18 {6AC1786C-016F-11D2-945F-00C04fB984F9}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 21:18 {A99FB5BE-989E-407D-81C2-8E0563980EDE}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 21:18 {CAD2E82F-9501-4507-8676-ACCF1DEB9820}
drwxrwx---+ 4 Administrator Domain Admins 4096 Sep 14 21:18 {FC6F93DA-46C2-4DE4-8FF3-F3994E796F9F}
이 문제를 해결하는 방법을 아시나요?