On 20/09/2020 15:31, Elias Pereira via samba wrote:>> But, the error with the replication still occurs. I thought the replication >> error was linked to the ghost entry error. >> # samba-tool drs replicate DC3 DC4 dc=campus,dc=company,dc=br --full-sync >> --sync-forced >> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - >> drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')OK, check the database with 'samba-tool dbcheck --cross-ncs' If you get any errors, add '--fix --yes', though you may have to remove the '--yes' and individually allow fixes. Rowland
No errors occur, but still not replicating. It is not of all entries.
For example, there are some users that the groups they are part, differ
between the two DCs.
In the link below there is a diff between groups of a specific user.
# ldbsearch -H /var/lib/samba/private/sam.ldb
"(samAccountName=125202)"
memberOf | grep CN= | awk -F, '{ print $1 }'
https://www.diffchecker.com/THo6dLOZ
On Sun, Sep 20, 2020 at 2:41 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 20/09/2020 15:31, Elias Pereira via samba wrote:
> >> But, the error with the replication still occurs. I thought the
> replication
> >> error was linked to the ghost entry error.
> >> # samba-tool drs replicate DC3 DC4 dc=campus,dc=company,dc=br
> --full-sync
> >> --sync-forced
> >> ERROR(<class 'samba.drs_utils.drsException'>):
DsReplicaSync failed -
> >> drsException: DsReplicaSync failed (58,
'WERR_BAD_NET_RESP')
>
> OK, check the database with 'samba-tool dbcheck --cross-ncs'
>
> If you get any errors, add '--fix --yes', though you may have to
remove
> the '--yes' and individually allow fixes.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
--
Elias Pereira
Another doubt that has come up now is the bydefaults entry. The dc4 has this entry, but the dc3 does not. The dc3 is the one with the fmso roles. Is it this way or is this entry missing in the dc3? * Comparing [DOMAIN] context... * DN lists have different size: 5702 != 5703 * DNs found only in ldap://DC4: CN=BYDEFAULTS,CN=NETGROUP,CN=YPSERV30,CN=RPCSERVICES,CN=SYSTEM,DC=CAMPUS,DC=COMPANY,DC=BR * Objects to be compared: 5702 On Sun, Sep 20, 2020 at 8:35 PM Elias Pereira <empbilly at gmail.com> wrote:> No errors occur, but still not replicating. It is not of all entries. > > For example, there are some users that the groups they are part, differ > between the two DCs. > > In the link below there is a diff between groups of a specific user. > # ldbsearch -H /var/lib/samba/private/sam.ldb "(samAccountName=125202)" > memberOf | grep CN= | awk -F, '{ print $1 }' > https://www.diffchecker.com/THo6dLOZ > > > > On Sun, Sep 20, 2020 at 2:41 PM Rowland penny via samba < > samba at lists.samba.org> wrote: > >> On 20/09/2020 15:31, Elias Pereira via samba wrote: >> >> But, the error with the replication still occurs. I thought the >> replication >> >> error was linked to the ghost entry error. >> >> # samba-tool drs replicate DC3 DC4 dc=campus,dc=company,dc=br >> --full-sync >> >> --sync-forced >> >> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - >> >> drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP') >> >> OK, check the database with 'samba-tool dbcheck --cross-ncs' >> >> If you get any errors, add '--fix --yes', though you may have to remove >> the '--yes' and individually allow fixes. >> >> Rowland >> >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > > -- > Elias Pereira >-- Elias Pereira
On 21/09/2020 00:35, Elias Pereira via samba wrote:> No errors occur, but still not replicating. It is not of all entries. > > For example, there are some users that the groups they are part, differ > between the two DCs. > > In the link below there is a diff between groups of a specific user. > # ldbsearch -H /var/lib/samba/private/sam.ldb "(samAccountName=125202)" > memberOf | grep CN= | awk -F, '{ print $1 }' > https://www.diffchecker.com/THo6dLOZAfter looking at that link, it isn't as a bad as what the the pretty picture paints ;-) The only difference is that DC3 has 'memberOf: CN=TAG-INF008-INFORMATICA II-2020/1' and DC4 doesn't, but they both have 'memberOf: CN=TAG-INF008-INFORMATICA I-T11-2020/1', a very similar group name, did one replace the other ? Rowland