[Samba] WG: Running 2 SAMBA4 DC Replication WERR_BADFILE error

Daniel Müller
Thu, 16 Sep 2010 07:42:06 -0000

Can Somebody have a look !?
Or an Idea. How bind can resolve the second cname ._mscds.
I can take every other cname for my second samba4 but the:
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs


NODE1 is: 02284f45-de16-4125-a795-3b614f540ef7
NODE2 is: a441f8f9-629d-43c4-bce6-a5dfba1e4ad9

So Replication from NODE2 to NODE1 works fine:
UpdateRefs OK for a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc
DC=tuebingen,DC=tst,DC=loc
dreplsrv_op_pull_source(WERR_OK)  ? No replication error all is ok
!!!!!!!!!!!!!!!!

Replication the other way There is an error:
dns child failed to find name
'a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc' of type
A
dreplsrv_notify: Failed to send DsReplicaSync to
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc for
DC=tuebingen,DC=tst,DC=loc - NT_STATUS_OBJECT_NAME_NOT_FOUND : WERR_BADFILE ?
Error!!??
started DsReplicaSync for CN=Schema,CN=Configuration,DC=tuebingen,DC=tst,DC=loc
to a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc

Asking my bind on NODE1:
 [root at node1 etc]# host -t A
02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc
02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc is an alias for
node1.tuebingen.tst.loc.
node1.tuebingen.tst.loc has address 192.168.134.27
And  for a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc:
host -t A a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc
Host a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc not found:
3(NXDOMAIN)

No alias record is shown for a441f8f9-629d-43c4-bce6-a5dfba1e4ad9 and node2!?

But in my zone-file:

                        IN NS   node1
                        IN NS   node2
            IN A    192.168.134.27
            IN A    192.168.134.28
node1        IN A    192.168.134.27
node2        IN A    192.168.134.28

gc._msdcs               IN A    192.168.134.27

02284f45-de16-4125-a795-3b614f540ef7._msdcs     IN CNAME        node1
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._mscds     IN CNAME        node2

What about this???
Any answers out there ???


ON NODE1:The master Samba ADS-Server

queued DsReplicaSync for DC=tuebingen,DC=tst,DC=loc to
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc (urgent=true)
uSN=0:1196872
queued DsReplicaSync for CN=Schema,CN=Configuration,DC=tuebingen,DC=tst,DC=loc
to a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc (urgent=true)
uSN=0:3388
queued DsReplicaSync for CN=Configuration,DC=tuebingen,DC=tst,DC=loc to
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc (urgent=true)
uSN=0:3571
started DsReplicaSync for DC=tuebingen,DC=tst,DC=loc to
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc
dreplsrv_notify_schedule(5) scheduled for: Wed Sep 15 09:38:11 2010 CEST
Mapped to DCERPC endpoint 135
added interface ip=192.168.134.27 nmask=255.255.255.0
added interface ip=192.168.134.27 nmask=255.255.255.0
dns child failed to find name
'a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc' of type
A
dreplsrv_notify: Failed to send DsReplicaSync to
a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc for
DC=tuebingen,DC=tst,DC=loc - NT_STATUS_OBJECT_NAME_NOT_FOUND : WERR_BADFILE
started DsReplicaSync for CN=Schema,CN=Configuration,DC=tuebingen,DC=tst,DC=loc
to a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc







ON NODE2= The second  Samba ADS-Server

Child /usr/local/samba/sbin/samba_spnupdate exited with status 0 - Success
Completed SPN update check OK
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was
unsuccessful
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was
unsuccessful
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was
unsuccessful
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was
unsuccessful
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was
unsuccessful
Child /usr/local/samba/sbin/samba_dnsupdate exited with status 0 - Success
Completed DNS update check OK
Registered NODE2<00> with 192.168.134.28 on interface 192.168.134.255
Registered NODE2<03> with 192.168.134.28 on interface 192.168.134.255
Registered NODE2<20> with 192.168.134.28 on interface 192.168.134.255
Registered TUEBINGEN<1c> with 192.168.134.28 on interface 192.168.134.255
Registered TUEBINGEN<00> with 192.168.134.28 on interface 192.168.134.255
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops memory=94
dreplsrv_refresh_partition(DC=tuebingen,DC=tst,DC=loc)
dreplsrv_out_connection_attach(02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc):
attach
dreplsrv_refresh_partition(CN=Configuration,DC=tuebingen,DC=tst,DC=loc)
dreplsrv_out_connection_attach(02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc):
attach
dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=tuebingen,DC=tst,DC=loc)
dreplsrv_out_connection_attach(02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc):
attach
dreplsrv_periodic_schedule(10) scheduled for: Wed Sep 15 09:25:47 2010 CEST
Mapped to DCERPC endpoint 135
added interface ip=192.168.134.28 nmask=255.255.255.0
added interface ip=192.168.134.28 nmask=255.255.255.0
queued DsReplicaSync for DC=tuebingen,DC=tst,DC=loc to
02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc (urgent=true)
uSN=0:627139
queued DsReplicaSync for CN=Configuration,DC=tuebingen,DC=tst,DC=loc to
02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc (urgent=false)
uSN=0:3524
queued DsReplicaSync for CN=Schema,CN=Configuration,DC=tuebingen,DC=tst,DC=loc
to 02284f45-de16-4125-a795-3b614f540ef7._msdcs.tuebingen.tst.loc (urgent=false)
uSN=0:1566
dreplsrv_notify_schedule(5) scheduled for: Wed Sep 15 09:25:42 2010 CEST
Mapped to DCERPC endpoint 1024
added interface ip=192.168.134.28 nmask=255.255.255.0
added interface ip=192.168.134.28 nmask=255.255.255.0
Starting GENSEC mechanism gssapi_krb5
Received smb_krb5 packet of length 276
Received smb_krb5 packet of length 1239
Received smb_krb5 packet of length 1360
Received smb_krb5 packet of length 1272
gensec_gssapi: credentials were delegated
GSSAPI Connection will be cryptographicly sealed
ldb: start ldb transaction (nesting: 0)
ldb: replmd_extended_replicated_objects
linked_attributes_count=0
DRS replication uptodate modify message:
dn: DC=tuebingen,DC=tst,DC=loc
changetype: modify
replace: replUpToDateVector
replUpToDateVector:: AgAAAAAAAAABAAAAAAAAAP+Z3WTpaTZMv6XoFUv/7x9IQxIAAAAAAIAuF
 jGnVMsB
-
replace: repsFrom
repsFrom:: AQAAAAAAAAASAQAAAAAAAPEFoQIDAAAA8QWhAgMAAAAAAAAA0AAAAEIAAABwAAAAERE
 RERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER
 ERERERERERERERERERERERERERERERERAAAAAEhDEgAAAAAAAAAAAAAAAABIQxIAAAAAAEVPKAIW3
 iVBp5U7YU9UDvf/md1k6Wk2TL+l6BVL/+8fAAAAAAAAAAAAAAAAAAAAAD4AAAAwMjI4NGY0NS1kZT
 E2LTQxMjUtYTc5NS0zYjYxNGY1NDBlZjcuX21zZGNzLnR1ZWJpbmdlbi50c3QubG9jAA=-


ldb: commit ldb transaction (nesting: 0)
Replicated 0 objects (0 linked attributes) for DC=tuebingen,DC=tst,DC=loc
UpdateRefs OK for a441f8f9-629d-43c4-bce6-a5dfba1e4ad9._msdcs.tuebingen.tst.loc
DC=tuebingen,DC=tst,DC=loc
dreplsrv_op_pull_source(WERR_OK)  ? No replication error all is ok
!!!!!!!!!!!!!!!!






EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de

Von: David Gonzalez [mailto:info at dghvoip.com]
Gesendet: Dienstag, 14. September 2010 23:31
An: mueller at tropenklinik.de
Betreff: Re: Running 2 SAMBA4 DC Replication WERR_BADFILE error

Well that same thing happens to me, looks like it's looking for some file,
but which file.

I get that error when I dcpromo'd a Windows 2008 R2 to make it another DC
for my domain.

I saw with my debuffing that it happens when samba  can not update the DNS zone
file, it's looking for some record on the zone that should've been
created when the DC joined the domain.

check DNS and tell us what happens.

Good luck.

---
... Chi va piano va sano e va lontano.
David Gonzalez H.
DGHVoIP - OPEN SOURCE TELEPHONY SOLUTIONS
Phone Bogot?: +(57-1)289-1168
Phone Medellin: +(57-4)247-0985
Mobile: +(57)315-838-8326
MSN: david at planetaradio.net
Skype: davidgonzalezh
WEB: http://www.dghvoip.com/
Linux User #294661
On Tue, Sep 14, 2010 at 7:38 AM, Daniel M?ller <mueller at
tropenklinik.de> wrote:
Any Idea!?

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Urspr?ngliche Nachricht-----
Von: Daniel M?ller [mailto:mueller at tropenklinik.de]
Gesendet: Freitag, 13. August 2010 14:14
An: 'samba at lists.samba.org'
Betreff: Running 2 SAMBA4 DC Replication WERR_BADFILE error

Hello to all,

I succeded with joining a samba4 dc to an existing samba4 domain. Things
work well but one error message coming from the master:
Dns child failed?.
Dreplsrv_notify: Failed to sent  DSReplicaSync to?.?the joined samba4 DC??.
NT_STATUS_OBJECT_NAME_NOT_FOUND:  WERR_BADFILE .
Where the joined DC succeds with: dreplserv_op_pull _source(WERR_OK).

How can I get rid of the error: NT_STATUS_OBJECT_NAME_NOT_FOUND:
WERR_BADFILE

Greetings Daniel

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------