thr3ads.net - samba - [Samba] Replace primary DC [Apr 2025]

If this information is useful, please help other people find it:
Share via:

Luis Peromarta

2025-Apr-28 19:25 UTC

[Samba] Replace primary DC

Did you reboot other DCs to restart replication ? Worth trying.
On 28 Apr 2025 at 20:10 +0100, Adnan R. via samba <samba at
lists.samba.org>, wrote:> Le 28/04/2025 ? 18:56, Rowland Penny via samba a ?crit?:
> > However your suggested method is sound.
>
> Well well well... Everything went through, no error until I check
> samba-tool drs showrepl. The DNS are still shown on my RSAT MMC, but
> Sites and Services and some other show that the credentials wrong T_T .
>
> root at dc2 ~# samba-tool drs showrepl
> 190bis\DC2
> DSA Options: 0x00000001
> DSA object GUID: 0924a58f-c346-4a9c-a8ff-4110234e70c4
> DSA invocationId: 90aaf304-e335-4cc5-8e22-f05f906e7443
>
> ==== INBOUND NEIGHBORS ===>
> DC=DomainDnsZones,DC=tech,DC=example,DC=com
> 133\DC4 via RPC
> DSA object GUID: c9861e09-61bf-4188-affa-c97ff61b1bb0
> Last attempt @ Mon Apr 28 20:57:36 2025 CEST was successful
> 0 consecutive failure(s).
> Last success @ Mon Apr 28 20:57:36 2025 CEST
>
> DC=DomainDnsZones,DC=tech,DC=example,DC=com
> 190bis\DC1 via RPC
> DSA object GUID: 61d35724-a484-4bd5-b1f8-54127991769a
> Last attempt @ Mon Apr 28 20:57:36 2025 CEST failed, result 31
> (WERR_GEN_FAILURE)
> 5 consecutive failure(s).
> Last success @ NTTIME(0)
>
> CN=Schema,CN=Configuration,DC=tech,DC=example,DC=com
> 133\DC4 via RPC
> DSA object GUID: c9861e09-61bf-4188-affa-c97ff61b1bb0
> Last attempt @ Mon Apr 28 20:57:38 2025 CEST was successful
> 0 consecutive failure(s).
> Last success @ Mon Apr 28 20:57:38 2025 CEST
>
> CN=Schema,CN=Configuration,DC=tech,DC=example,DC=com
> 190bis\DC1 via RPC
> DSA object GUID: 61d35724-a484-4bd5-b1f8-54127991769a
> Last attempt @ Mon Apr 28 20:57:38 2025 CEST failed, result 31
> (WERR_GEN_FAILURE)
> 5 consecutive failure(s).
> Last success @ NTTIME(0)
>
> DC=ForestDnsZones,DC=tech,DC=example,DC=com
> 133\DC4 via RPC
> DSA object GUID: c9861e09-61bf-4188-affa-c97ff61b1bb0
> Last attempt @ Mon Apr 28 20:57:37 2025 CEST was successful
> 0 consecutive failure(s).
> Last success @ Mon Apr 28 20:57:37 2025 CEST
>
> DC=ForestDnsZones,DC=tech,DC=example,DC=com
> 190bis\DC1 via RPC
> DSA object GUID: 61d35724-a484-4bd5-b1f8-54127991769a
> Last attempt @ Mon Apr 28 20:57:37 2025 CEST failed, result 31
> (WERR_GEN_FAILURE)
> 5 consecutive failure(s).
> Last success @ NTTIME(0)
>
> DC=tech,DC=example,DC=com
> 133\DC4 via RPC
> DSA object GUID: c9861e09-61bf-4188-affa-c97ff61b1bb0
> Last attempt @ Mon Apr 28 20:57:39 2025 CEST was successful
> 0 consecutive failure(s).
> Last success @ Mon Apr 28 20:57:39 2025 CEST
>
> DC=tech,DC=example,DC=com
> 190bis\DC1 via RPC
> DSA object GUID: 61d35724-a484-4bd5-b1f8-54127991769a
> Last attempt @ Mon Apr 28 21:00:49 2025 CEST failed, result 31
> (WERR_GEN_FAILURE)
> 6 consecutive failure(s).
> Last success @ NTTIME(0)
>
> CN=Configuration,DC=tech,DC=example,DC=com
> 133\DC4 via RPC
> DSA object GUID: c9861e09-61bf-4188-affa-c97ff61b1bb0
> Last attempt @ Mon Apr 28 20:57:39 2025 CEST was successful
> 0 consecutive failure(s).
> Last success @ Mon Apr 28 20:57:39 2025 CEST
>
> CN=Configuration,DC=tech,DC=example,DC=com
> 190bis\DC1 via RPC
> DSA object GUID: 61d35724-a484-4bd5-b1f8-54127991769a
> Last attempt @ Mon Apr 28 20:57:39 2025 CEST failed, result 31
> (WERR_GEN_FAILURE)
> 5 consecutive failure(s).
> Last success @ NTTIME(0)
>
> ==== OUTBOUND NEIGHBORS ===>
> ==== KCC CONNECTION OBJECTS ===>
> Connection --
> Connection name: 49e338b6-0a13-463f-8e70-1c77413bea49
> Enabled : TRUE
> Server DNS name : dc4.tech.example.com
> Server DN name : CN=NTDS
>
Settings,CN=DC4,CN=Servers,CN=133,CN=Sites,CN=Configuration,DC=tech,DC=example,DC=com
> TransportType: RPC
> options: 0x00000001
> Warning: No NC replicated for Connection!
> Connection --
> Connection name: 059eb3b5-754d-43b4-b424-e67000c30f6d
> Enabled : TRUE
> Server DNS name : dc1.tech.example.com
> Server DN name : CN=NTDS
>
Settings,CN=DC1,CN=Servers,CN=190bis,CN=Sites,CN=Configuration,DC=tech,DC=example,DC=com
> TransportType: RPC
> options: 0x00000001
> Warning: No NC replicated for Connection!
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

aere_premium.0k at icloud.com

2025-Apr-30 06:23 UTC

head link

[Samba] Replace primary DC

Le 28/04/2025 ? 21:25, Luis Peromarta via samba a
?crit?:> Did you reboot other DCs to restart replication ? Worth trying.
I did that and after the night, it went normally apparently. No more 
errors. Until today, I can't login to my computer, showing "Your domain
isn't available" and journalctl -xeu samba-ad-dc showing in
attachments.

The 4 DCs are up and samba online.

Any idea please ?


-------------- next part --------------
Apr 30 03:11:42 dc1 rpcd_winreg[34617]:   Copyright Andrew Tridgell and the
Samba Team 1992-2024
Apr 30 03:11:43 dc1 smbd[34620]: [2025/04/30 03:11:43.353643,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:43 dc1 smbd[34620]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:43 dc1 smbd[34620]: [2025/04/30 03:11:43.353706,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:43 dc1 smbd[34620]:   [0000] A9 42 B0 94 98 A7 AA 49   12 D2 91 77
DA D2 29 C0   .B.....I ...w..).
Apr 30 03:11:43 dc1 smbd[34620]: [2025/04/30 03:11:43.353734,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:43 dc1 smbd[34620]:   [0000] 8C 3F F6 08 B2 7C 02 1C   07 DD 35 9E
3B 50 AB 3B   .?...|.. ..5.;P.;
Apr 30 03:11:44 dc1 smbd[34621]: [2025/04/30 03:11:44.164386,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:44 dc1 smbd[34621]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:44 dc1 smbd[34621]: [2025/04/30 03:11:44.164487,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:44 dc1 smbd[34621]:   [0000] 63 7B 1E 88 56 3C 53 9A   C7 66 A8 07
02 D2 22 84   c{..V<S. .f....".
Apr 30 03:11:44 dc1 smbd[34621]: [2025/04/30 03:11:44.164942,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:44 dc1 smbd[34621]:   [0000] CF E3 4B A7 16 F2 9F C7   CE D2 F8 4C
B7 CF A2 00   ..K..... ...L....
Apr 30 03:11:44 dc1 smbd[34622]: [2025/04/30 03:11:44.905599,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:44 dc1 smbd[34622]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:44 dc1 smbd[34622]: [2025/04/30 03:11:44.905685,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:44 dc1 smbd[34622]:   [0000] 22 3E 33 E7 32 ED 5B 01   FC E9 9F 55
89 05 87 7D   ">3.2.[. ...U...}
Apr 30 03:11:44 dc1 smbd[34622]: [2025/04/30 03:11:44.905713,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:44 dc1 smbd[34622]:   [0000] 69 80 F5 C3 56 A8 DD CC   6F 72 1C 72
90 10 E1 FE   i...V... or.r....
Apr 30 03:11:45 dc1 smbd[34623]: [2025/04/30 03:11:45.587948,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:45 dc1 smbd[34623]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:45 dc1 smbd[34623]: [2025/04/30 03:11:45.588322,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:45 dc1 smbd[34623]:   [0000] B7 DA 66 F1 78 33 62 DB   90 89 EE 7A
7D 72 FA BE   ..f.x3b. ...z}r..
Apr 30 03:11:45 dc1 smbd[34623]: [2025/04/30 03:11:45.588448,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:45 dc1 smbd[34623]:   [0000] 49 8D ED 3C 33 B7 7B 65   35 6A 16 A6
C9 CD C0 86   I..<3.{e 5j......
Apr 30 03:11:46 dc1 smbd[34624]: [2025/04/30 03:11:46.301564,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:46 dc1 smbd[34624]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:46 dc1 smbd[34624]: [2025/04/30 03:11:46.301976,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:46 dc1 smbd[34624]:   [0000] 8D 42 CE 91 DC E1 A0 14   69 E8 E7 3E
3C D0 7D FC   .B...... i..><.}.
Apr 30 03:11:46 dc1 smbd[34624]: [2025/04/30 03:11:46.302089,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:46 dc1 smbd[34624]:   [0000] 3A 94 41 D0 4C 57 A9 53   98 A7 EC 1B
15 5A C2 B2   :.A.LW.S .....Z..
Apr 30 03:11:46 dc1 smbd[34625]: [2025/04/30 03:11:46.991703,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:46 dc1 smbd[34625]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:46 dc1 smbd[34625]: [2025/04/30 03:11:46.991757,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:46 dc1 smbd[34625]:   [0000] BC B2 F4 F9 AF F6 F8 98   AA 46 7F B8
E8 5A 3A 62   ........ .F...Z:b
Apr 30 03:11:46 dc1 smbd[34625]: [2025/04/30 03:11:46.991784,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:46 dc1 smbd[34625]:   [0000] D8 E6 EF F9 B3 94 6B C8   1E 46 DB 38
88 1D 38 30   ......k. .F.8..80
Apr 30 03:11:47 dc1 smbd[34626]: [2025/04/30 03:11:47.678138,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:47 dc1 smbd[34626]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:47 dc1 smbd[34626]: [2025/04/30 03:11:47.678204,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:47 dc1 smbd[34626]:   [0000] CD 3A 81 22 2B E9 A6 22   B7 EE A9 7B
A8 A9 AB D0   .:."+.." ...{....
Apr 30 03:11:47 dc1 smbd[34626]: [2025/04/30 03:11:47.678232,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:47 dc1 smbd[34626]:   [0000] 57 2C 9A C7 51 BA 4B FB   0F BC 85 A2
3D D9 47 AB   W,..Q.K. ....=.G.
Apr 30 03:11:48 dc1 smbd[34627]: [2025/04/30 03:11:48.366430,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:48 dc1 smbd[34627]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:48 dc1 smbd[34627]: [2025/04/30 03:11:48.366500,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:48 dc1 smbd[34627]:   [0000] 57 43 9C 7E 3E A4 E0 CD   82 AA B3 8F
CA 3B 0A 03   WC.~>... .....;..
Apr 30 03:11:48 dc1 smbd[34627]: [2025/04/30 03:11:48.366527,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:48 dc1 smbd[34627]:   [0000] 12 D2 13 C3 E4 F1 AD 5D   CA 68 9F 37
5E CF 2F AB   .......] .h.7^./.
Apr 30 03:11:49 dc1 smbd[34628]: [2025/04/30 03:11:49.068363,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:49 dc1 smbd[34628]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:49 dc1 smbd[34628]: [2025/04/30 03:11:49.068446,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:49 dc1 smbd[34628]:   [0000] 19 46 1C 67 90 7A 8C 79   EB 15 80 71
5D 39 82 37   .F.g.z.y ...q]9.7
Apr 30 03:11:49 dc1 smbd[34628]: [2025/04/30 03:11:49.068487,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:49 dc1 smbd[34628]:   [0000] 4F 84 78 B1 A5 89 22 3B   1C 2E 03 CF
1E 97 19 E3   O.x..."; ........
Apr 30 03:11:49 dc1 smbd[34629]: [2025/04/30 03:11:49.799092,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:49 dc1 smbd[34629]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:49 dc1 smbd[34629]: [2025/04/30 03:11:49.799459,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:49 dc1 smbd[34629]:   [0000] 95 78 78 D3 30 6F 2E 24   30 9B 30 ED
5C 0C D4 2C   .xx.0o.$ 0.0.\..,
Apr 30 03:11:49 dc1 smbd[34629]: [2025/04/30 03:11:49.799599,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:49 dc1 smbd[34629]:   [0000] FB DB 21 28 6D 90 3C 91   E5 91 B1 81
21 03 11 51   ..!(m.<. ....!..Q
Apr 30 03:11:50 dc1 smbd[34630]: [2025/04/30 03:11:50.501943,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:50 dc1 smbd[34630]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:50 dc1 smbd[34630]: [2025/04/30 03:11:50.502310,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:50 dc1 smbd[34630]:   [0000] D4 3E 5E 28 9E 8B B0 11   BE 0B C1 24
50 11 0B 78   .>^(.... ...$P..x
Apr 30 03:11:50 dc1 smbd[34630]: [2025/04/30 03:11:50.502421,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:50 dc1 smbd[34630]:   [0000] 46 71 E3 31 1D CD 52 9C   19 89 CE 8D
6C F8 18 DE   Fq.1..R. ....l...
Apr 30 03:11:51 dc1 smbd[34631]: [2025/04/30 03:11:51.188381,  0]
libcli/smb/smb2_signing.c:646(smb2_signing_check_pdu)
Apr 30 03:11:51 dc1 smbd[34631]:   Bad SMB2 (sign_algo_id=1) signature for
message
Apr 30 03:11:51 dc1 smbd[34631]: [2025/04/30 03:11:51.188438,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:51 dc1 smbd[34631]:   [0000] C4 C5 06 32 08 C5 A0 53   69 33 96 DB
D2 1C 9D 29   ...2...S i3.....)
Apr 30 03:11:51 dc1 smbd[34631]: [2025/04/30 03:11:51.188465,  0]
lib/util/util.c:580(dump_data)
Apr 30 03:11:51 dc1 smbd[34631]:   [0000] DA 80 24 04 3D 89 C4 B1   B7 FC 93 EE
53 A9 62 9E   ..$.=... ....S.b.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20250430/8ad5ba3b/OpenPGP_signature.sig>

samba - Apr 2025 - Replace primary DC

[Samba] Replace primary DC

[Samba] Replace primary DC