Marcio Demetrio Bacci
2019-Aug-04 12:53 UTC
[Samba] DsReplicaGetInfo() failed with status 8453
Hi,
I have started getting the following error message when I run the repadmin
showreps command on the Windows Server 2008 server that is my primary DC:
DsReplicaGetInfo() failed with status 8453 (0x2105):
Replication access has been denied.
DsReplicaGetInfo() failed with status 8453 (0x2105):
Replication access has been denied.
My scenario has a Windows Server 2008 as the primary DC and a Samba 4
Server installed on Debian 9.9 as a secondary server.
Following is the complete result of the repadmin command:
C:\Users\administrator>repadmin /showreps
Default-First-Site-Name\WIN-DC1
DC Options: IS_GC
Site Options: (none)
DC object GUID: d580939f-a8b9-43ea-84e9-be0f9bd29468
DC invocationID: 71c305c7-564f-44dc-bdc7-c03ee501bd52
==== INBOUND NEIGHBORS =====================================
DC=empresa,DC=com,DC=br
Default-First-Site-Name\SAMBA4-DC via RPC
DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
Last attempt @ 2019-08-04 08:52:07 was successful.
CN=Configuration,DC=empresa,DC=com,DC=br
Default-First-Site-Name\SAMBA4-DC via RPC
DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
Last attempt @ 2019-08-04 08:52:07 was successful.
CN=Schema,CN=Configuration,DC=empresa,DC=com,DC=br
Default-First-Site-Name\SAMBA4-DC via RPC
DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
Last attempt @ 2019-08-04 08:52:07 was successful.
DC=DomainDnsZones,DC=empresa,DC=com,DC=br
Default-First-Site-Name\SAMBA4-DC via RPC
DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
Last attempt @ 2019-08-04 08:52:07 was successful.
DC=ForestDnsZones,DC=empresa,DC=com,DC=br
Default-First-Site-Name\SAMBA4-DC via RPC
DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
Last attempt @ 2019-08-04 08:52:07 was successful.
DsReplicaGetInfo() failed with status 8453 (0x2105):
Replication access has been denied.
DsReplicaGetInfo() failed with status 8453 (0x2105):
Replication access has been denied.
I notice that recurrently differences arise between the bases of my
servers, as follows:
ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator
Password for [EMPRESA\Administrator]:
* Comparing [DOMAIN] context...
* Objects to be compared: 1788
* Result for [DOMAIN]: SUCCESS
* Comparing [CONFIGURATION] context...
* Objects to be compared: 1640
* Result for [CONFIGURATION]: SUCCESS
* Comparing [SCHEMA] context...
* Objects to be compared: 1518
* Result for [SCHEMA]: SUCCESS
* Comparing [DNSDOMAIN] context...
* Objects to be compared: 540
Comparing:
'DC=CMC03,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
[ldap://WIN-DC1]
'DC= CMC03
,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
[ldap://SAMBA4-DC]
Difference in attribute values:
dnsRecord =>
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd2\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd0\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
FAILED
* Result for [DNSDOMAIN]: FAILURE
SUMMARY
---------
Attributes with different values:
dnsRecord
* Comparing [DNSFOREST] context...
* Objects to be compared: 35
* Result for [DNSFOREST]: SUCCESS
ERROR: Compare failed: -1
I had already fixed the above error before.
How can I solve this problem?
Marcio Demetrio Bacci
2019-Aug-04 16:00 UTC
[Samba] DsReplicaGetInfo() failed with status 8453
Hi, This problem was solved. In the Windows prompt, I wasn't run as Administrator. About " ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator" Only there is a delay between Windows and Samba 4 DC. Regards, M?rcio Bacci. Em dom, 4 de ago de 2019 ?s 09:53, Marcio Demetrio Bacci < marciobacci at gmail.com> escreveu:> Hi, > > I have started getting the following error message when I run the repadmin > showreps command on the Windows Server 2008 server that is my primary DC: > > DsReplicaGetInfo() failed with status 8453 (0x2105): > Replication access has been denied. > DsReplicaGetInfo() failed with status 8453 (0x2105): > Replication access has been denied. > > > My scenario has a Windows Server 2008 as the primary DC and a Samba 4 > Server installed on Debian 9.9 as a secondary server. > > Following is the complete result of the repadmin command: > > C:\Users\administrator>repadmin /showreps > Default-First-Site-Name\WIN-DC1 > DC Options: IS_GC > Site Options: (none) > DC object GUID: d580939f-a8b9-43ea-84e9-be0f9bd29468 > DC invocationID: 71c305c7-564f-44dc-bdc7-c03ee501bd52 > > ==== INBOUND NEIGHBORS =====================================> > DC=empresa,DC=com,DC=br > Default-First-Site-Name\SAMBA4-DC via RPC > DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a > Last attempt @ 2019-08-04 08:52:07 was successful. > > CN=Configuration,DC=empresa,DC=com,DC=br > Default-First-Site-Name\SAMBA4-DC via RPC > DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a > Last attempt @ 2019-08-04 08:52:07 was successful. > > CN=Schema,CN=Configuration,DC=empresa,DC=com,DC=br > Default-First-Site-Name\SAMBA4-DC via RPC > DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a > Last attempt @ 2019-08-04 08:52:07 was successful. > > DC=DomainDnsZones,DC=empresa,DC=com,DC=br > Default-First-Site-Name\SAMBA4-DC via RPC > DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a > Last attempt @ 2019-08-04 08:52:07 was successful. > > DC=ForestDnsZones,DC=empresa,DC=com,DC=br > Default-First-Site-Name\SAMBA4-DC via RPC > DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a > Last attempt @ 2019-08-04 08:52:07 was successful. > DsReplicaGetInfo() failed with status 8453 (0x2105): > Replication access has been denied. > DsReplicaGetInfo() failed with status 8453 (0x2105): > Replication access has been denied. > > > I notice that recurrently differences arise between the bases of my > servers, as follows: > > ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator > Password for [EMPRESA\Administrator]: > > * Comparing [DOMAIN] context... > > * Objects to be compared: 1788 > > * Result for [DOMAIN]: SUCCESS > > * Comparing [CONFIGURATION] context... > > * Objects to be compared: 1640 > > * Result for [CONFIGURATION]: SUCCESS > > * Comparing [SCHEMA] context... > > * Objects to be compared: 1518 > > * Result for [SCHEMA]: SUCCESS > > * Comparing [DNSDOMAIN] context... > > * Objects to be compared: 540 > > Comparing: > 'DC=CMC03,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br' > [ldap://WIN-DC1] > 'DC= CMC03 ,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br' > [ldap://SAMBA4-DC] > Difference in attribute values: > dnsRecord => > > ['\x04\x00\x01\x00\x05\xf0\x00\x00\xd2\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01'] > > ['\x04\x00\x01\x00\x05\xf0\x00\x00\xd0\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01'] > FAILED > > * Result for [DNSDOMAIN]: FAILURE > > SUMMARY > --------- > > Attributes with different values: > > dnsRecord > > * Comparing [DNSFOREST] context... > > * Objects to be compared: 35 > > * Result for [DNSFOREST]: SUCCESS > ERROR: Compare failed: -1 > > I had already fixed the above error before. > > How can I solve this problem? >