On Wed, 2012-09-12 at 02:26 -0500, Kristofer wrote:> Hello,
>
> I have three DC's in an environment, and ldapcmp is failing. How can I
figure out either what went wrong, or how to resolve the issue so that the
databases are truly in sync?
>
>
> * Comparing [DOMAIN] context...
>
> * Objects to be compared: 2277
>
> Comparing:
> 'CN=Builtin,DC=ad,DC=domain,DC=com' [ldap://192.168.10.81]
> 'CN=Builtin,DC=ad,DC=domain,DC=com' [ldap://192.168.10.9]
> Attributes found only in ldap://192.168.10.81:
> serverState
> FAILED
>
> Comparing:
> 'DC=ad,DC=domain,DC=com' [ldap://192.168.10.81]
> 'DC=ad,DC=domain,DC=com' [ldap://192.168.10.9]
> Attributes found only in ldap://192.168.10.81:
> msDS-NcType
> serverState
> FAILED
>
> * Result for [DOMAIN]: FAILURE
>
> SUMMARY
> ---------
>
> Attributes found only in ldap://192.168.10.81:
>
> msDS-NcType
> serverState
> ERROR: Compare failed: -1
I think these are per-NC attributes, but I'm not sure. I looked into it
a few weeks back hoping to add it to our default test roster, and found
something similar. That is, I can assure you that what you see is sadly
normal: this test isn't expected to pass on the current codebase.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org