Ing. Claudio Nicora
2018-Jul-13 13:19 UTC
[Samba] samba-tool drs showrepl not reporting last attempt/success time correctly
I'm having a strange"samba-tool drs showrepl" output and I don't know where to start to fix it. My environment: - SRVWIN: Win2008R2 DC server - SRVSAMBA: Samba 4.7.6 DC on Ubuntu 18.04 Server - SRVSAMBA2: Samba 4.7.6 DC on Ubuntu 18.04 Server To test AD replication I've created an user object on SRVWIN and it appears on both SRVSAMBA and SRVSAMBA2 (checked with ADUC from SRVWIN). Then I changed the user object on SRVSAMBA and changes are reflected on both SRVWIN and SRVSAMBA2. Finally I've deleted the user object from SRVSAMBA2 and it disappeared on all DCs. I'm supposing replication works correctly, but "samba-tool drs showrepl" on Samba servers shows something strange: INBOUND NEIGHBORS items are all ok while OUTBOUND NEIGHBORS to/from Samba servers shows "NTTIME(0)" instead of the expected attempt/success dates. This is the output of "samba-tool drs showrepl" run on SRVSAMBA. Running it on SRVSAMBA2 gives the same output, just swap SRVSAMBA with SRVSAMBA2. Is this expected? How could I fix it? Thanks Claudio ******************************************************************** # samba-tool drs showrepl Default-First-Site-Name\SRVSAMBA DSA Options: 0x00000001 DSA object GUID: 61eeaa1e-8786-474d-97e9-73d016cbfabe DSA invocationId: 5b85ee7e-afb5-4ea7-b507-84559aa9ca8b ==== INBOUND NEIGHBORS === CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:53:35 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:35 2018 CEST DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ Fri Jul 13 14:53:02 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:53:02 2018 CEST DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:54:16 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:54:16 2018 CEST ==== OUTBOUND NEIGHBORS === CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 11:27:52 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 11:27:52 2018 CEST CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:38:44 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:38:44 2018 CEST CN=Configuration,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:50:50 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:50:50 2018 CEST DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 14:49:40 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 14:49:40 2018 CEST DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVWIN via RPC DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 Last attempt @ Fri Jul 13 11:45:38 2018 CEST was successful 0 consecutive failure(s). Last success @ Fri Jul 13 11:45:38 2018 CEST DC=SAMDOM,DC=LOCAL Default-First-Site-Name\SRVSAMBA2 via RPC DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) ==== KCC CONNECTION OBJECTS === Connection -- Connection name: 16ec9821-3197-4401-8e71-f52a8030cf3a Enabled : TRUE Server DNS name : srvsamba2.SAMDOM.LOCAL Server DN name : CN=NTDS Settings,CN=SRVSAMBA2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SAMDOM,DC=LOCAL TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection! Connection -- Connection name: 81e9a664-1afe-4a1e-85e4-2b0bf7712f6f Enabled : TRUE Server DNS name : SRVWIN.samdom.local Server DN name : CN=NTDS Settings,CN=SRVWIN,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SAMDOM,DC=LOCAL TransportType: RPC options: 0x00000001 Warning: No NC replicated for Connection! ****************************************************
lingpanda101
2018-Jul-13 13:26 UTC
[Samba] samba-tool drs showrepl not reporting last attempt/success time correctly
On 7/13/2018 9:19 AM, Ing. Claudio Nicora via samba wrote:> I'm having a strange"samba-tool drs showrepl" output and I don't know > where to start to fix it. > > My environment: > - SRVWIN: Win2008R2 DC server > - SRVSAMBA: Samba 4.7.6 DC on Ubuntu 18.04 Server > - SRVSAMBA2: Samba 4.7.6 DC on Ubuntu 18.04 Server > > To test AD replication I've created an user object on SRVWIN and it > appears on both SRVSAMBA and SRVSAMBA2 (checked with ADUC from SRVWIN). > Then I changed the user object on SRVSAMBA and changes are reflected > on both SRVWIN and SRVSAMBA2. > Finally I've deleted the user object from SRVSAMBA2 and it disappeared > on all DCs. > > I'm supposing replication works correctly, but "samba-tool drs > showrepl" on Samba servers shows something strange: > INBOUND NEIGHBORS items are all ok while OUTBOUND NEIGHBORS to/from > Samba servers shows "NTTIME(0)" instead of the expected > attempt/success dates. > > This is the output of "samba-tool drs showrepl" run on SRVSAMBA. > Running it on SRVSAMBA2 gives the same output, just swap SRVSAMBA with > SRVSAMBA2. > > Is this expected? > How could I fix it? > > Thanks > Claudio > > > ******************************************************************** > # samba-tool drs showrepl > Default-First-Site-Name\SRVSAMBA > DSA Options: 0x00000001 > DSA object GUID: 61eeaa1e-8786-474d-97e9-73d016cbfabe > DSA invocationId: 5b85ee7e-afb5-4ea7-b507-84559aa9ca8b > > ==== INBOUND NEIGHBORS ===> > CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:53:35 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:35 2018 CEST > > DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ Fri Jul 13 14:53:02 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:53:02 2018 CEST > > DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:54:16 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:54:16 2018 CEST > > ==== OUTBOUND NEIGHBORS ===> > CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 11:27:52 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 11:27:52 2018 CEST > > CN=Schema,CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:38:44 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:38:44 2018 CEST > > CN=Configuration,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:50:50 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:50:50 2018 CEST > > DC=ForestDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 14:49:40 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 14:49:40 2018 CEST > > DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVWIN via RPC > DSA object GUID: 237cdbec-2e42-4b36-b571-eea51daaa535 > Last attempt @ Fri Jul 13 11:45:38 2018 CEST was > successful > 0 consecutive failure(s). > Last success @ Fri Jul 13 11:45:38 2018 CEST > > DC=SAMDOM,DC=LOCAL > Default-First-Site-Name\SRVSAMBA2 via RPC > DSA object GUID: a21f165c-9fc8-4024-83e9-89f182f05077 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > ==== KCC CONNECTION OBJECTS ===> > Connection -- > Connection name: 16ec9821-3197-4401-8e71-f52a8030cf3a > Enabled : TRUE > Server DNS name : srvsamba2.SAMDOM.LOCAL > Server DN name : CN=NTDS > Settings,CN=SRVSAMBA2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SAMDOM,DC=LOCAL > TransportType: RPC > options: 0x00000001 > Warning: No NC replicated for Connection! > Connection -- > Connection name: 81e9a664-1afe-4a1e-85e4-2b0bf7712f6f > Enabled : TRUE > Server DNS name : SRVWIN.samdom.local > Server DN name : CN=NTDS > Settings,CN=SRVWIN,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SAMDOM,DC=LOCAL > TransportType: RPC > options: 0x00000001 > Warning: No NC replicated for Connection! > > **************************************************** > > >It's expected. You would see the failure count increment if you did have a issue. -James
Apparently Analagous Threads
- Repadmin fails when querying Samba server 4.7.6
- Repadmin fails when querying Samba server 4.7.6
- sysvolreset error '{Operation Failed} The requested operation was unsuccessful.'
- sysvolreset error '{Operation Failed} The requested operation was unsuccessful.'
- sysvolreset error '{Operation Failed} The requested operation was unsuccessful.'