Joris
2013-Aug-12  11:11 UTC
[Samba] drs failed on version 4.1.0rc2: RID Manager failed RID allocation - WERR_BADFILE
I installed samba as an AD as described on the wiki and set up replication
as described on the wiki.
I checked and users are not replicated.
I am getting the following messages
Primary server (SambaCK):
LOG:
 Copyright Andrew Tridgell and the Samba Team 1992-2013
[2013/08/12 08:48:46.359901,  0]
../source4/smbd/server.c:492(binary_smbd_main)
  samba: using 'standard' process model
[2013/08/12 08:48:46.582463,  0]
../source4/lib/tls/tlscert.c:70(tls_cert_generate)
  Attempting to autogenerate TLS self-signed keys for https for hostname '
SAMBACK.ec.sbat.be'
[2013/08/12 08:48:47.078082,  0]
../source4/lib/tls/tlscert.c:166(tls_cert_generate)
  TLS self-signed keys generated OK
[2013/08/12 11:25:55.632341,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/sbin/rndc: rndc: connect failed: 127.0.0.1#953: connection refused
root at SambaCK:/usr/src/samba-4.1.0rc2# samba-tool drs showrepl
Default-First-Site-Name\SAMBACK
DSA Options: 0x00000001
DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
DSA invocationId: b1d14df0-427b-43aa-8cc5-22a6f3ead48d
==== INBOUND NEIGHBORS ===
DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)
DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)
DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)
CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)
==== OUTBOUND NEIGHBORS ===
DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)
DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)
DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)
CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)
==== KCC CONNECTION OBJECTS ===
Connection --
        Connection name: 399cadb6-df56-4b6b-8841-7a59f070a01a
        Enabled        : TRUE
        Server DNS name : SAMBA1016.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBA1016,CN=Servers,CN=1016,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!
Secondary server ( samba1016 ):
root at samba1016:~# samba-tool drs showrepl
1016\SAMBA1016
DSA Options: 0x00000001
DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
DSA invocationId: 0219cdda-0ded-47c4-abf7-2d9743b20669
==== INBOUND NEIGHBORS ===
DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:01 2013 CEST
CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:09 2013 CEST
DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
==== OUTBOUND NEIGHBORS ===
==== KCC CONNECTION OBJECTS ===
Connection --
        Connection name: f3c64acd-ab88-46b7-a7e7-214073e27413
        Enabled        : TRUE
        Server DNS name : SambaCK.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBACK,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!
root at samba1016:~# cd /usr/src/samba-4.1.0rc2/
root at samba1016:/usr/src/samba-4.1.0rc2# samba-tool drs showrepl
1016\SAMBA1016
DSA Options: 0x00000001
DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
DSA invocationId: 0219cdda-0ded-47c4-abf7-2d9743b20669
==== INBOUND NEIGHBORS ===
DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:01 2013 CEST
CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:09 2013 CEST
DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST
==== OUTBOUND NEIGHBORS ===
==== KCC CONNECTION OBJECTS ===
Connection --
        Connection name: f3c64acd-ab88-46b7-a7e7-214073e27413
        Enabled        : TRUE
        Server DNS name : SambaCK.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBACK,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!
LOG:
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:09.957541,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.118268,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.275537,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.431771,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.585786,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.734509,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.891021,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:21.801609,  0]
../source4/dsdb/repl/drepl_ridalloc.c:43(drepl_new_rid_pool_callback)
  ../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
allocation - WERR_BADFILE - extended_ret[0x0]
[2013/08/12 11:54:21.816265,  0]
../source4/dsdb/repl/drepl_ridalloc.c:43(drepl_new_rid_pool_callback)
  ../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
allocation - WERR_BADFILE - extended_ret[0x0]
[2013/08/12 11:59:07.914150,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.080362,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.250600,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.458947,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
I thought it might be useful to report my experience as it is in testing.
Any suggestions to produce better output are welcome.
Best regards,
Joris Willems
