search for: serverreference

...e RID Set creation needed') Since it mentions RID creation, I went to the RID master server, looking into the logs, I found: ../source4/rpc_server/drsuapi/getncchanges.c:829: Failed extended allocation RID pool operation - ../source4/dsdb/samdb/ldb_modules/ridalloc.c:727: Failed to find serverReference in CN=THEODEN,CN=Servers,CN=AWS,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br - (null) In this case, THEODEN is the new DC. Then, doing the following search for: ldbsearch -H /var/lib/samba/private/sam.ldb '(CN=THEODEN)' --cross-ncs on both the new DC and the Rid Master, I find out...

...ng: 'CN=AROEIRA,CN=SERVERS,CN=ABL-CURITIBA-IGUACU,CN=SITES,CN=CONFIGURATION,DC=AD,DC=A1,DC=IND,DC=BR' [ldap://eucalipto] 'CN=AROEIRA,CN=SERVERS,CN=ABL-CURITIBA-IGUACU,CN=SITES,CN=CONFIGURATION,DC=AD,DC=A1,DC=IND,DC=BR' [ldap://antares] ??? Difference in attribute values: ??????? serverReference => [b'CN=AROEIRA,OU=Domain Controllers,DC=ad,DC=a1,DC=ind,DC=br'] [b'CN=AROEIRA\\0ACNF:0a341e37-f3e4-486d-9d96-ced9adbcb2ee,OU=Domain Controllers,DC=ad,DC=a1,DC=ind,DC=br'] ??? FAILED Comparing: 'CN=CONFIGURATION,DC=AD,DC=A1,DC=IND,DC=BR' [ldap://eucalipto] 'CN=CO...

...s for digging into this! Now I'm interested in the root cause as well ... Uli Am 16.01.2018 um 16:48 schrieb Heinz Hölzl via samba: > no, it seems to work!!! > > > i did a ldapmodify on DC2: > > ldapmodify -x -h dc2 -D cn=administrator,cn=users,dc=test,dc=net -W -f > serverReference.ldif > > serverReference.ldif: > dn: CN=SAMBA3,CN=Servers,CN=Default-First- > SiteName,CN=Sites,CN=Configuration,DC=test,DC=net > changetype: modify > add: serverReference > serverReference: CN=SAMBA3,OU=Domain Controllers,DC=test,DC=net > - > > > now the question:...

...ed ldbedit to apply the fix. > Thanks for digging into this! > > Now I'm interested in the root cause as well ... I just had a client calling with a replication issue due to the exact same error. The domain was initially build on 4.7.1, upgraded to 4.7.3, and it was also missing the serverReference attribute on one of the DCs... The fix mentionned by the OP did resolve the issue. I'm wondering what triggered this. I have just installed a fresh 4.7.0, and a fresh 4.7.1, and a fresh 4.7.4. The serverReference attribute is always there... Thanks Heinz for the hint, Denis > > &g...

...the schema. Yesterday when I compared the databases on the two linux servers they only had a couple of errors, today, many errors and now the schema says it is a different size: * Result for [CONFIGURATION]: FAILURE SUMMARY --------- Attributes found only in ldap://genesis: dSASignature serverReference Attributes with different values: msDS-NC-Replica-Locations extraColumns mS-DS-ReplicatesNCReason adminPropertyPages appliesTo attributeDisplayNames masteredBy interSiteTopologyGenerator adminContextMenu msDs-masteredBy classDisplayName revision *...

...e compared: 1631 Comparing: 'CN=SAMBA03,CN=Servers,CN=Harz,CN=Sites,CN=Configuration,DC=local,DC=laurenz,DC=ws' [ldap://samba01] 'CN=SAMBA03,CN=Servers,CN=Harz,CN=Sites,CN=Configuration,DC=local,DC=laurenz,DC=ws' [ldap://samba02] Attributes found only in ldap://samba01: serverReference FAILED * Result for [CONFIGURATION]: FAILURE SUMMARY --------- Attributes found only in ldap://samba01: serverReference ERROR: Compare failed: -1 -----Ursprüngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Heinz Hölzl via samba Gesendet: Dienst...

...s->pdc. After this change the DCs wrote the missing entries into the DNS. Another problem I had with the tool "Active Directory Sites and Services". The information about the DCs were incomplete for the newly joinned DCs. I compared the attribute list and saw, that the attribute "serverReference" was empty. But a check with "ldbsearch" showed a value for this attribute (serverReferenceBL). Was like the value had a hidden character the tool "Active Directory Sites and Services" couldnt interpret. After rewriting this value everything worked.

no, it seems to work!!! i did a ldapmodify on DC2: ldapmodify -x -h dc2 -D cn=administrator,cn=users,dc=test,dc=net -W -f serverReference.ldif serverReference.ldif: dn: CN=SAMBA3,CN=Servers,CN=Default-First- SiteName,CN=Sites,CN=Configuration,DC=test,DC=net changetype: modify add: serverReference serverReference: CN=SAMBA3,OU=Domain Controllers,DC=test,DC=net - now the question: Why the attribut serverReference was missing on DC2...

...95221609-1112)) > > > > > [2017/12/27 12:31:29.733157, 1] > > > > > ../source4/dsdb/common/util.c:4807(dsdb_validate_dsa_guid) > > > > > ../source4/dsdb/common/util.c:4807: Failed to find > > > > > account dn > > > > > (serverReference) for > > > > > CN=DCNH1,CN=Servers,CN=Default-First-Site- > > > > > Name,CN=Sites,CN=Configuration,DC=ad,DC=kdu,DC=com, > > > > > parent of DSA with objectGUID 0acce4bc-1193-4609-8e4d- > > > > > a0771bb6fb76, > > > > > sid S...

on DC2 in the log i found: ./source4/dsdb/common/util.c:4807: Failed to find account dn (serverReference) for CN=SAMBA3,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net, parent of DSA with objectGUID c01a335e-1794-4997-9c7e-553be77fba04, sid S-1-5-21- 1608159440-4144762864-1017073214-18962 ../source4/rpc_server/drsuapi/updaterefs.c:374: Refusing DsReplicaUpdateRefs for s...

> I faced the same problem, solved it by adding the line > import samba.drs_utils > to the file fsmo.py. > > When building samba yourself, from withtin the base directory you can > apply this patch file to do it for you: Thank you Nobert. Indeed the line "import samba.drs_utils" is missing, although I'm using the repositories from Sernet. According to

...SERVERS,CN=ABL-CURITIBA-IGUACU,CN=SITES,CN=CONFIGURATION,DC=AD,DC=A1,DC=IND,DC=BR' > [ldap://eucalipto] > 'CN=AROEIRA,CN=SERVERS,CN=ABL-CURITIBA-IGUACU,CN=SITES,CN=CONFIGURATION,DC=AD,DC=A1,DC=IND,DC=BR' > [ldap://antares] > ??? Difference in attribute values: > ??????? serverReference => > [b'CN=AROEIRA,OU=Domain Controllers,DC=ad,DC=a1,DC=ind,DC=br'] > [b'CN=AROEIRA\\0ACNF:0a341e37-f3e4-486d-9d96-ced9adbcb2ee,OU=Domain > Controllers,DC=ad,DC=a1,DC=ind,DC=br'] The '\\OACNF' means this is a collision, two things tried to create the record at...

...t; the two linux servers they only had a couple of errors, today, many > errors and now the schema says it is a different size: > > * Result for [CONFIGURATION]: FAILURE > > SUMMARY > --------- > > Attributes found only in ldap://genesis: > > ? ? dSASignature > ? ? serverReference > > Attributes with different values: > > ? ? msDS-NC-Replica-Locations > ? ? extraColumns > ? ? mS-DS-ReplicatesNCReason > ? ? adminPropertyPages > ? ? appliesTo > ? ? attributeDisplayNames > ? ? masteredBy > ? ? interSiteTopologyGenerator > ? ? adminContextMenu...

...622-9593650dd565 Discarding older DRS linked attribute update to msDS-hasMasterNCs on CN=NTDS Settings,CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at from c93692f6-4a12-41c3-b622-9593650dd565 Discarding older DRS linked attribute update to serverReference on CN=ADC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arbeitsgruppe,DC=mydomain,DC=at from c93692f6-4a12-41c3-b622-9593650dd565 Discarding older DRS linked attribute update to serverReference on CN=BACKUP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=arb...

I happily and trustfully use Louis' backup-script from https://github.com/thctlo/samba4 to dump AD content via cronjob. Is it necessary/recommended to do that on *each* samba DC? Is there something server-specific in the dump(s) or is it enough to do that once per domain? thanks ...

OK, tried that. Kicked myself for not trying earlier... but it didn't work. In fact, the error has got worse. Now when I try to go from Genesis to Luke I get: sudo samba-tool drs replicate luke genesis DC=kcs,DC=local -Udomainadmin . . ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (1359, 'WERR_INTERNAL_ERROR')

..."System" Event log in the last 60 minutes. ......................... BASE passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=3DBASE,OU=3DDomain Controllers,DC=3Dmytestdomain,DC=3Dca and = backlink on CN=3DBASE,CN=3DServers,CN=3DDefault-First-Site-Name,CN=3DSites,CN=3DConfi= guration,DC=3Dm ytestdomain,DC=3Dca are correct. Some objects relating to the DC BASE have problems: [1]...

..."System" Event log in the last 60 minutes. ......................... BASE passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=BASE,OU=Domain Controllers,DC=mytestdomain,DC=ca and backlink on CN=BASE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mytestdomain,DC=ca are correct. Some objects relating to the DC BASE have problems: [1] Problem: Missing Expected V...

..."System" Event log in the last 60 minutes. ......................... BASE passed test SystemLog Test omitted by user request: Topology Test omitted by user request: VerifyEnterpriseReferences Starting test: VerifyReferences The system object reference (serverReference) CN=BASE,OU=Domain Controllers,DC=mytestdomain,DC=ca and backlink on CN=BASE,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mytestdomain,DC=ca are correct. Some objects relating to the DC BASE have problems: [1] Problem: Missing Expected V...

...C=kdu,DC=com > gave 0 objects (done 0/0) 0 links (done 0/0 (as > S-1-5-21-454945863-777199239-1595221609-1112)) > [2017/12/27 12:31:29.733157,  1] > ../source4/dsdb/common/util.c:4807(dsdb_validate_dsa_guid) >   ../source4/dsdb/common/util.c:4807: Failed to find account dn > (serverReference) for > CN=DCNH1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,DC=kdu,DC=com, > parent of DSA with objectGUID 0acce4bc-1193-4609-8e4d-a0771bb6fb76, > sid S-1-5-21-454945863-777199239-1595221609-1112 > [2017/12/27 12:31:29.733198,  0] > ../source4/rpc_server/...