Zerwes, Klaus
2014-Sep-18 16:02 UTC
[Samba] samba 4 domain join to win 2008r2 level DC w/ a schema with exchange 2010 extensions: replication after the join is broken
I tried to join a samba4 to a win2008r2 level domain (OS level 2012) running
exchange 2010.
The join succeeds but the later replication is broken due to schema differences.
In order to to find the cause, I started a test setup with:
* a win2008r2 DC w/ minimal AD
* upgraded the schema and the OS to 2012 (function level is still 2008r2)
* and added a exchange server to the domain.
And that is where the replication problems start.
I have used debian 7 and ubuntu 14.04, trying samba compiled from sources and
the sernet packages (both at version 4.1.12).
During the join I get several warnings about unknown IDs:
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030002
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030006
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003003E
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030041
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030050
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128359
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128364
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128365
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128366
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128380
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x2612838C
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283A8
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283C7
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283D2
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283DD
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF207D1
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF21389
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF21B64
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF2232A
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFA
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFC
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFD
../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22EE4
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090828
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090835
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090836
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090837
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009083C
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009083D
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090850
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090852
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090869
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009086B
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090877
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009087C
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009087E
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090886
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088A
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088E
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088F
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090898
../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908A5
running samba-tool drs showrepl for the samba ad looks OK
# samba-tool drs showrepl
==== INBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:57 2014 CEST
CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:57 2014 CEST
DC=DomainDnsZones,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:57 2014 CEST
CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:57 2014 CEST
DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:33:31 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:33:31 2014 CEST
==== OUTBOUND NEIGHBORS ===
CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:11:47 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:11:47 2014 CEST
CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:11:47 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:11:47 2014 CEST
DC=test,DC=rls,DC=ad
hostonly\W2K8R2 via RPC
DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2
Last attempt @ Thu Sep 18 17:33:50 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:33:50 2014 CEST
==== KCC CONNECTION OBJECTS ===
Connection --
Connection name: d4568044-6ddc-403f-a87f-6e575c1cc667
Enabled : TRUE
Server DNS name : w2k8r2.test.rls.ad
Server DN name : CN=NTDS
Settings,CN=W2K8R2,CN=Servers,CN=hostonly,CN=Sites,CN=Configuration,DC=test,DC=rls,DC=ad
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
running it for the win DC reveals the WERR_DS_DRA_SCHEMA_MISMATCH error (sami if
running repadmin /showrepl on the win DC)
# samba-tool drs showrepl w2k8r2.test.rls.ad
==== INBOUND NEIGHBORS ===
DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ Thu Sep 18 17:33:53 2014 CEST failed, result 8418
(WERR_DS_DRA_SCHEMA_MISMATCH)
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ Thu Sep 18 17:11:57 2014 CEST failed, result 8418
(WERR_DS_DRA_SCHEMA_MISMATCH)
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ Thu Sep 18 17:33:53 2014 CEST was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:33:53 2014 CEST
==== OUTBOUND NEIGHBORS ===
DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:34:39 2014 CEST
CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:58 2014 CEST
CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:58 2014 CEST
DC=DomainDnsZones,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:58 2014 CEST
DC=ForestDnsZones,DC=test,DC=rls,DC=ad
hostonly\TESTADEX via RPC
DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ Thu Sep 18 17:31:58 2014 CEST
==== KCC CONNECTION OBJECTS ===
Connection --
Connection name: ae19f051-dfc3-4ec3-b9cc-7bc8ccf62bc5
Enabled : TRUE
Server DNS name : testadex.test.rls.ad
Server DN name : CN=NTDS
Settings,CN=TESTADEX,CN=Servers,CN=hostonly,CN=Sites,CN=Configuration,DC=test,DC=rls,DC=ad
TransportType: RPC
options: 0x00000001
ReplicatesNC: CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad
Reason: 0x00000002
NTDSCONN_KCC_RING_TOPOLOGY
ReplicatesNC: CN=Configuration,DC=test,DC=rls,DC=ad
Reason: 0x00000002
NTDSCONN_KCC_RING_TOPOLOGY
ReplicatesNC: DC=test,DC=rls,DC=ad
Reason: 0x00000002
NTDSCONN_KCC_RING_TOPOLOGY
forcing the replication is not fixing the problem.
running a ldapcmp on config:
* Comparing [CONFIGURATION] context...
* DN lists have different size: 2536 != 2538
CN=EXCG,CN=Mailbox Database 1438610048,CN=Databases,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
* Objects to be compared: 2536
Comparing:
'CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://localhost]
'CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://w2k8r2]
Attributes found only in ldap://w2k8r2:
subRefs
msDS-NcType
FAILED
* Result for [CONFIGURATION]: FAILURE
SUMMARY
---------
Attributes found only in ldap://w2k8r2:
msDS-NcType
subRefs
on domain:
* Comparing [DOMAIN] context...
* Objects to be compared: 276
Comparing:
'CN=Builtin,DC=test,DC=rls,DC=ad' [ldap://localhost]
'CN=Builtin,DC=test,DC=rls,DC=ad' [ldap://w2k8r2]
Attributes found only in ldap://w2k8r2:
serverState
FAILED
Comparing:
'DC=test,DC=rls,DC=ad' [ldap://localhost]
'DC=test,DC=rls,DC=ad' [ldap://w2k8r2]
Attributes found only in ldap://w2k8r2:
serverState
subRefs
msDS-NcType
FAILED
* Result for [DOMAIN]: FAILURE
and on schema:
* Comparing [SCHEMA] context...
* Objects to be compared: 4068
Comparing:
'CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://localhost]
'CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://w2k8r2]
Attributes found only in ldap://w2k8r2:
msDS-NcType
FAILED
* Result for [SCHEMA]: FAILURE
SUMMARY
---------
Attributes found only in ldap://w2k8r2:
msDS-NcType
# samba-tool dbcheck
Checking 319 objects
ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad -
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Not fixing missing GUID
Please use --fix to fix these errors
Checked 319 objects (1 errors)
# samba-tool dbcheck --fix --yes
Checking 319 objects
ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad -
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Change DN to
<GUID=b3c331ed-76d3-4b09-9ebb-1f36355a36d8>;<SID=S-1-5-21-1429754283-1111656078-1468358875-1128>;CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad? [YES]
WARNING: backlink from CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad already
removed from CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - attribute
'authOrigBL': no matching attribute value while deleting attribute on
'CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad'
Fixed missing GUID on attribute authOrig
Checked 319 objects (1 errors)
# samba-tool dbcheck --cross-ncs
Checking 7717 objects
ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWATranscodingMimeTypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAForceSaveFileTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWABlockedMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAForceSaveMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAAllowedFileTypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAAllowedMimeTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWABlockedFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWATranscodingFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWATranscodingMimeTypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAForceSaveFileTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWABlockedMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAForceSaveMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAAllowedFileTypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWAAllowedMimeTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWABlockedFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not removing orphaned backlink msExchOWATranscodingFileTypes
ERROR: description not present on Deleted Objects container CN=Deleted
Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad
Not fixing missing/incorrect attributes on CN=Deleted
Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad
ERROR: description not present on Deleted Objects container CN=Deleted
Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad
Not fixing missing/incorrect attributes on CN=Deleted
Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad
ERROR: orphaned backlink attribute 'authOrigBL' in
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link
authOrig in CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Not removing orphaned backlink authOrig
ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad -
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Not fixing missing GUID
Please use --fix to fix these errors
Checked 7717 objects (20 errors)
# samba-tool dbcheck --cross-ncs --fix --yes
ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWATranscodingMimeTypes [YES]
Fixed orphaned backlink msExchOWATranscodingMimeTypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAForceSaveFileTypes [YES]
Fixed orphaned backlink msExchOWAForceSaveFileTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWABlockedMIMETypes [YES]
Fixed orphaned backlink msExchOWABlockedMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAForceSaveMIMETypes [YES]
Fixed orphaned backlink msExchOWAForceSaveMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAAllowedFileTypes [YES]
Fixed orphaned backlink msExchOWAAllowedFileTypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAAllowedMimeTypes [YES]
Fixed orphaned backlink msExchOWAAllowedMimeTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWABlockedFileTypes [YES]
Fixed orphaned backlink msExchOWABlockedFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWATranscodingFileTypes [YES]
Fixed orphaned backlink msExchOWATranscodingFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWATranscodingMimeTypes [YES]
Fixed orphaned backlink msExchOWATranscodingMimeTypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAForceSaveFileTypes [YES]
Fixed orphaned backlink msExchOWAForceSaveFileTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWABlockedMIMETypes [YES]
Fixed orphaned backlink msExchOWABlockedMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAForceSaveMIMETypes [YES]
Fixed orphaned backlink msExchOWAForceSaveMIMETypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAAllowedFileTypes [YES]
Fixed orphaned backlink msExchOWAAllowedFileTypes
ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWAAllowedMimeTypes [YES]
Fixed orphaned backlink msExchOWAAllowedMimeTypes
ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWABlockedFileTypes [YES]
Fixed orphaned backlink msEWARNING: backlink from CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad already
removed from CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - attribute
'authOrigBL': no matching attribute value while deleting attribute on
'CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad'
xchOWABlockedFileTypes
ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Remove orphaned backlink msExchOWATranscodingFileTypes [YES]
Fixed orphaned backlink msExchOWATranscodingFileTypes
ERROR: description not present on Deleted Objects container CN=Deleted
Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad
Fix Deleted Objects container CN=Deleted
Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad by restoring default attributes?
[YES]
Fixed Deleted Objects container 'CN=Deleted
Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad'
ERROR: description not present on Deleted Objects container CN=Deleted
Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad
Fix Deleted Objects container CN=Deleted
Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad by restoring default attributes?
[YES]
Fixed Deleted Objects container 'CN=Deleted
Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad'
ERROR: orphaned backlink attribute 'authOrigBL' in
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link
authOrig in CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Remove orphaned backlink authOrig [YES]
Fixed orphaned backlink authOrig
ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad -
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Change DN to
<GUID=b3c331ed-76d3-4b09-9ebb-1f36355a36d8>;<SID=S-1-5-21-1429754283-1111656078-1468358875-1128>;CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad? [YES]
Fixed missing GUID on attribute authOrig
Checked 7717 objects (20 errors)
Still 18 error unfixable:
# samba-tool dbcheck --cross-ncs
Checking 7717 objects
ERROR: missing backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWATranscodingFileTypesBL
ERROR: missing backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWABlockedFileTypesBL
ERROR: missing backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAAllowedMimeTypesBL
ERROR: missing backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAAllowedFileTypesBL
ERROR: missing backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAForceSaveMIMETypesBL
ERROR: missing backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWABlockedMIMETypesBL
ERROR: missing backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAForceSaveFileTypesBL
ERROR: missing backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox
Policies,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWATranscodingMimeTypesBL
ERROR: missing backlink attribute 'msExchOWATranscodingFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWATranscodingFileTypesBL
ERROR: missing backlink attribute 'msExchOWABlockedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWABlockedFileTypesBL
ERROR: missing backlink attribute 'msExchOWAAllowedMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAAllowedMimeTypesBL
ERROR: missing backlink attribute 'msExchOWAAllowedFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAAllowedFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAAllowedFileTypesBL
ERROR: missing backlink attribute 'msExchOWAForceSaveMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAForceSaveMIMETypesBL
ERROR: missing backlink attribute 'msExchOWABlockedMIMETypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWABlockedMIMETypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWABlockedMIMETypesBL
ERROR: missing backlink attribute 'msExchOWAForceSaveFileTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWAForceSaveFileTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWAForceSaveFileTypesBL
ERROR: missing backlink attribute 'msExchOWATranscodingMimeTypesBL' in
CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link
msExchOWATranscodingMimeTypes in CN=owa (Default Web
Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
Not fixing missing backlink msExchOWATranscodingMimeTypesBL
ERROR: orphaned backlink attribute 'authOrigBL' in
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link
authOrig in CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Not removing orphaned backlink authOrig
ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad -
CN=DiscoverySearchMailbox
{D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad
Not fixing missing GUID
Please use --fix to fix these errors
Checked 7717 objects (18 errors)
Comparing the ldbsearch results for
CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
--- localhost.log 2014-09-18 17:58:47.193220624 +0200
+++ w2k8r2.log 2014-09-18 17:58:47.593216298 +0200
@@ -4,6 +4,7 @@
distinguishedName: CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrativ
e Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchan
ge,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad
+dSCorePropagationData: 16010101000000.0Z
instanceType: 4
msExchActivationPreference: 134217727
msExchHostServerLink: CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYD
@@ -20,9 +21,9 @@
objectClass: msExchMDBCopy
objectGUID: e5d72e1b-5dcb-4c91-adab-bf5e8d23fdfb
systemFlags: 1073741824
-uSNChanged: 8101
-uSNCreated: 7301
-whenChanged: 20140918135858.0Z
+uSNChanged: 86519
+uSNCreated: 86519
+whenChanged: 20140917103126.0Z
whenCreated: 20140917103126.0Z
Any hints and help to get that stuff running would be highly appreciated.
If I can provide further informations, please just let me know.
Best regards
Klaus
Rowland Penny
2014-Sep-18 17:05 UTC
[Samba] samba 4 domain join to win 2008r2 level DC w/ a schema with exchange 2010 extensions: replication after the join is broken
On 18/09/14 17:02, Zerwes, Klaus wrote:> I tried to join a samba4 to a win2008r2 level domain (OS level 2012) running exchange 2010. > The join succeeds but the later replication is broken due to schema differences. > > In order to to find the cause, I started a test setup with: > * a win2008r2 DC w/ minimal AD > * upgraded the schema and the OS to 2012 (function level is still 2008r2) > * and added a exchange server to the domain. > And that is where the replication problems start. > > I have used debian 7 and ubuntu 14.04, trying samba compiled from sources and the sernet packages (both at version 4.1.12). > > During the join I get several warnings about unknown IDs: > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030002 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030006 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030012 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003001D > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030033 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003003E > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030041 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030044 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030045 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030048 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004B > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x0003004F > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030050 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x00030054 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x000A010D > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128359 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128364 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128365 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128366 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x26128380 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x2612838C > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283A8 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283C7 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283D2 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x261283DD > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF207D1 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF21389 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF21B64 > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF2232A > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFA > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFC > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22AFD > ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID 0x7BF22EE4 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090828 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090835 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090836 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090837 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009083C > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009083D > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090850 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090852 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090869 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009086B > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090877 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009087C > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009087E > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090886 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088A > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088E > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x0009088F > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x00090898 > ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908A5 > > > > running samba-tool drs showrepl for the samba ad looks OK > # samba-tool drs showrepl > ==== INBOUND NEIGHBORS ===> > DC=ForestDnsZones,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:57 2014 CEST > > CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:57 2014 CEST > > DC=DomainDnsZones,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:57 2014 CEST > > CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:31:57 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:57 2014 CEST > > DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:33:31 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:33:31 2014 CEST > > ==== OUTBOUND NEIGHBORS ===> > CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:11:47 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:11:47 2014 CEST > > CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:11:47 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:11:47 2014 CEST > > DC=test,DC=rls,DC=ad > hostonly\W2K8R2 via RPC > DSA object GUID: 73958b3d-6ebe-4e33-96e8-1e96f86701f2 > Last attempt @ Thu Sep 18 17:33:50 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:33:50 2014 CEST > > ==== KCC CONNECTION OBJECTS ===> > Connection -- > Connection name: d4568044-6ddc-403f-a87f-6e575c1cc667 > Enabled : TRUE > Server DNS name : w2k8r2.test.rls.ad > Server DN name : CN=NTDS Settings,CN=W2K8R2,CN=Servers,CN=hostonly,CN=Sites,CN=Configuration,DC=test,DC=rls,DC=ad > TransportType: RPC > options: 0x00000001 > Warning: No NC replicated for Connection! > > > > running it for the win DC reveals the WERR_DS_DRA_SCHEMA_MISMATCH error (sami if running repadmin /showrepl on the win DC) > # samba-tool drs showrepl w2k8r2.test.rls.ad > ==== INBOUND NEIGHBORS ===> > DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ Thu Sep 18 17:33:53 2014 CEST failed, result 8418 (WERR_DS_DRA_SCHEMA_MISMATCH) > 0 consecutive failure(s). > Last success @ NTTIME(0) > > CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ Thu Sep 18 17:11:57 2014 CEST failed, result 8418 (WERR_DS_DRA_SCHEMA_MISMATCH) > 0 consecutive failure(s). > Last success @ NTTIME(0) > > CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ Thu Sep 18 17:33:53 2014 CEST was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:33:53 2014 CEST > > ==== OUTBOUND NEIGHBORS ===> > DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:34:39 2014 CEST > > CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:58 2014 CEST > > CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:58 2014 CEST > > DC=DomainDnsZones,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:58 2014 CEST > > DC=ForestDnsZones,DC=test,DC=rls,DC=ad > hostonly\TESTADEX via RPC > DSA object GUID: d5c0b67a-de4f-47fd-a99a-e2d7614667d7 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ Thu Sep 18 17:31:58 2014 CEST > > ==== KCC CONNECTION OBJECTS ===> > Connection -- > Connection name: ae19f051-dfc3-4ec3-b9cc-7bc8ccf62bc5 > Enabled : TRUE > Server DNS name : testadex.test.rls.ad > Server DN name : CN=NTDS Settings,CN=TESTADEX,CN=Servers,CN=hostonly,CN=Sites,CN=Configuration,DC=test,DC=rls,DC=ad > TransportType: RPC > options: 0x00000001 > ReplicatesNC: CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad > Reason: 0x00000002 > NTDSCONN_KCC_RING_TOPOLOGY > ReplicatesNC: CN=Configuration,DC=test,DC=rls,DC=ad > Reason: 0x00000002 > NTDSCONN_KCC_RING_TOPOLOGY > ReplicatesNC: DC=test,DC=rls,DC=ad > Reason: 0x00000002 > NTDSCONN_KCC_RING_TOPOLOGY > > > > forcing the replication is not fixing the problem. > > > running a ldapcmp on config: > * Comparing [CONFIGURATION] context... > > * DN lists have different size: 2536 != 2538 > CN=EXCG,CN=Mailbox Database 1438610048,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > > * Objects to be compared: 2536 > > Comparing: > 'CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://localhost] > 'CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://w2k8r2] > Attributes found only in ldap://w2k8r2: > subRefs > msDS-NcType > FAILED > > * Result for [CONFIGURATION]: FAILURE > > SUMMARY > --------- > > Attributes found only in ldap://w2k8r2: > > msDS-NcType > subRefs > > > > > on domain: > * Comparing [DOMAIN] context... > > * Objects to be compared: 276 > > Comparing: > 'CN=Builtin,DC=test,DC=rls,DC=ad' [ldap://localhost] > 'CN=Builtin,DC=test,DC=rls,DC=ad' [ldap://w2k8r2] > Attributes found only in ldap://w2k8r2: > serverState > FAILED > > Comparing: > 'DC=test,DC=rls,DC=ad' [ldap://localhost] > 'DC=test,DC=rls,DC=ad' [ldap://w2k8r2] > Attributes found only in ldap://w2k8r2: > serverState > subRefs > msDS-NcType > FAILED > > * Result for [DOMAIN]: FAILURE > > > > > and on schema: > * Comparing [SCHEMA] context... > > * Objects to be compared: 4068 > > Comparing: > 'CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://localhost] > 'CN=Schema,CN=Configuration,DC=test,DC=rls,DC=ad' [ldap://w2k8r2] > Attributes found only in ldap://w2k8r2: > msDS-NcType > FAILED > > * Result for [SCHEMA]: FAILURE > > SUMMARY > --------- > > Attributes found only in ldap://w2k8r2: > > msDS-NcType >I do not know about the rest, but the ldapcmp problem was discussed recently and a patch to cure it was provided, see: https://lists.samba.org/archive/samba/2014-August/184539.html Rowland> > > # samba-tool dbcheck > Checking 319 objects > ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Not fixing missing GUID > Please use --fix to fix these errors > Checked 319 objects (1 errors) > > # samba-tool dbcheck --fix --yes > Checking 319 objects > ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Change DN to <GUID=b3c331ed-76d3-4b09-9ebb-1f36355a36d8>;<SID=S-1-5-21-1429754283-1111656078-1468358875-1128>;CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad? [YES] > WARNING: backlink from CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad already removed from CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - attribute 'authOrigBL': no matching attribute value while deleting attribute on 'CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad' > Fixed missing GUID on attribute authOrig > Checked 319 objects (1 errors) > > > # samba-tool dbcheck --cross-ncs > Checking 7717 objects > ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWATranscodingMimeTypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAForceSaveFileTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWABlockedMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAForceSaveMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAAllowedFileTypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAAllowedMimeTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWABlockedFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWATranscodingFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWATranscodingMimeTypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAForceSaveFileTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWABlockedMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAForceSaveMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAAllowedFileTypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWAAllowedMimeTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWABlockedFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not removing orphaned backlink msExchOWATranscodingFileTypes > ERROR: description not present on Deleted Objects container CN=Deleted Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad > Not fixing missing/incorrect attributes on CN=Deleted Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad > > ERROR: description not present on Deleted Objects container CN=Deleted Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad > Not fixing missing/incorrect attributes on CN=Deleted Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad > > ERROR: orphaned backlink attribute 'authOrigBL' in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link authOrig in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Not removing orphaned backlink authOrig > ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Not fixing missing GUID > Please use --fix to fix these errors > Checked 7717 objects (20 errors) > > > > > # samba-tool dbcheck --cross-ncs --fix --yes > ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWATranscodingMimeTypes [YES] > Fixed orphaned backlink msExchOWATranscodingMimeTypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAForceSaveFileTypes [YES] > Fixed orphaned backlink msExchOWAForceSaveFileTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWABlockedMIMETypes [YES] > Fixed orphaned backlink msExchOWABlockedMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAForceSaveMIMETypes [YES] > Fixed orphaned backlink msExchOWAForceSaveMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAAllowedFileTypes [YES] > Fixed orphaned backlink msExchOWAAllowedFileTypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAAllowedMimeTypes [YES] > Fixed orphaned backlink msExchOWAAllowedMimeTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWABlockedFileTypes [YES] > Fixed orphaned backlink msExchOWABlockedFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWATranscodingFileTypes [YES] > Fixed orphaned backlink msExchOWATranscodingFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWATranscodingMimeTypes [YES] > Fixed orphaned backlink msExchOWATranscodingMimeTypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAForceSaveFileTypes [YES] > Fixed orphaned backlink msExchOWAForceSaveFileTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWABlockedMIMETypes [YES] > Fixed orphaned backlink msExchOWABlockedMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAForceSaveMIMETypes [YES] > Fixed orphaned backlink msExchOWAForceSaveMIMETypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAAllowedFileTypes [YES] > Fixed orphaned backlink msExchOWAAllowedFileTypes > ERROR: orphaned backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWAAllowedMimeTypes [YES] > Fixed orphaned backlink msExchOWAAllowedMimeTypes > ERROR: orphaned backlink attribute 'msExchOWABlockedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWABlockedFileTypes [YES] > Fixed orphaned backlink msEWARNING: backlink from CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad already removed from CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - attribute 'authOrigBL': no matching attribute value while deleting attribute on 'CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad' > xchOWABlockedFileTypes > ERROR: orphaned backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Remove orphaned backlink msExchOWATranscodingFileTypes [YES] > Fixed orphaned backlink msExchOWATranscodingFileTypes > ERROR: description not present on Deleted Objects container CN=Deleted Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad > Fix Deleted Objects container CN=Deleted Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad by restoring default attributes? [YES] > Fixed Deleted Objects container 'CN=Deleted Objects,DC=DomainDnsZones,DC=test,DC=rls,DC=ad' > > ERROR: description not present on Deleted Objects container CN=Deleted Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad > Fix Deleted Objects container CN=Deleted Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad by restoring default attributes? [YES] > Fixed Deleted Objects container 'CN=Deleted Objects,DC=ForestDnsZones,DC=test,DC=rls,DC=ad' > > ERROR: orphaned backlink attribute 'authOrigBL' in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link authOrig in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Remove orphaned backlink authOrig [YES] > Fixed orphaned backlink authOrig > ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Change DN to <GUID=b3c331ed-76d3-4b09-9ebb-1f36355a36d8>;<SID=S-1-5-21-1429754283-1111656078-1468358875-1128>;CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad? [YES] > Fixed missing GUID on attribute authOrig > Checked 7717 objects (20 errors) > > > > Still 18 error unfixable: > # samba-tool dbcheck --cross-ncs > Checking 7717 objects > ERROR: missing backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWATranscodingFileTypesBL > ERROR: missing backlink attribute 'msExchOWABlockedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWABlockedFileTypesBL > ERROR: missing backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAAllowedMimeTypesBL > ERROR: missing backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAAllowedFileTypesBL > ERROR: missing backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAForceSaveMIMETypesBL > ERROR: missing backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWABlockedMIMETypesBL > ERROR: missing backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAForceSaveFileTypesBL > ERROR: missing backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=Default,CN=OWA Mailbox Policies,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWATranscodingMimeTypesBL > ERROR: missing backlink attribute 'msExchOWATranscodingFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWATranscodingFileTypesBL > ERROR: missing backlink attribute 'msExchOWABlockedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWABlockedFileTypesBL > ERROR: missing backlink attribute 'msExchOWAAllowedMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAAllowedMimeTypesBL > ERROR: missing backlink attribute 'msExchOWAAllowedFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAAllowedFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAAllowedFileTypesBL > ERROR: missing backlink attribute 'msExchOWAForceSaveMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAForceSaveMIMETypesBL > ERROR: missing backlink attribute 'msExchOWABlockedMIMETypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWABlockedMIMETypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWABlockedMIMETypesBL > ERROR: missing backlink attribute 'msExchOWAForceSaveFileTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWAForceSaveFileTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWAForceSaveFileTypesBL > ERROR: missing backlink attribute 'msExchOWATranscodingMimeTypesBL' in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad for link msExchOWATranscodingMimeTypes in CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > Not fixing missing backlink msExchOWATranscodingMimeTypesBL > ERROR: orphaned backlink attribute 'authOrigBL' in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad for link authOrig in CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Not removing orphaned backlink authOrig > ERROR: missing GUID component for authOrig in object CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad - CN=DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},CN=Users,DC=test,DC=rls,DC=ad > Not fixing missing GUID > Please use --fix to fix these errors > Checked 7717 objects (18 errors) > > > Comparing the ldbsearch results for CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > --- localhost.log 2014-09-18 17:58:47.193220624 +0200 > +++ w2k8r2.log 2014-09-18 17:58:47.593216298 +0200 > @@ -4,6 +4,7 @@ > distinguishedName: CN=EXCG,CN=pubfolder,CN=Databases,CN=Exchange Administrativ > e Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=rls,CN=Microsoft Exchan > ge,CN=Services,CN=Configuration,DC=test,DC=rls,DC=ad > +dSCorePropagationData: 16010101000000.0Z > instanceType: 4 > msExchActivationPreference: 134217727 > msExchHostServerLink: CN=EXCG,CN=Servers,CN=Exchange Administrative Group (FYD > @@ -20,9 +21,9 @@ > objectClass: msExchMDBCopy > objectGUID: e5d72e1b-5dcb-4c91-adab-bf5e8d23fdfb > systemFlags: 1073741824 > -uSNChanged: 8101 > -uSNCreated: 7301 > -whenChanged: 20140918135858.0Z > +uSNChanged: 86519 > +uSNCreated: 86519 > +whenChanged: 20140917103126.0Z > whenCreated: 20140917103126.0Z > > > > Any hints and help to get that stuff running would be highly appreciated. > > If I can provide further informations, please just let me know. > > Best regards > Klaus > > > > > > > > > > >
Zerwes, Klaus
2014-Sep-19 08:04 UTC
[Samba] samba 4 domain join to win 2008r2 level DC w/ a schema with exchange 2010 extensions: replication after the join is broken
Will try today a new join and repl and start network package capturing during the 2 steps and post them here. Maybe somebody can get more infos out of the pcaps. Klaus
Zerwes, Klaus
2014-Sep-19 08:12 UTC
[Samba] samba 4 domain join to win 2008r2 level DC w/ a schema with exchange 2010 extensions: replication after the join is broken
Just another note: due to the broken replication a regular demote fails.
# samba-tool domain demote -UAdministrator
Desactivating inbound replication
Asking partner server w2k8r2.test.rls.ad to synchronize from us
Error while demoting, re-enabling inbound replication
ERROR(<class 'samba.drs_utils.drsException'>): Error while sending
a DsReplicaSync for partion CN=Configuration,DC=test,DC=rls,DC=ad -
drsException: DsReplicaSync failed (8418, 'WERR_DS_DRA_SCHEMA_MISMATCH')
File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
line 650, in run
sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part),
drsuapi.DRSUAPI_DRS_WRIT_REP)
File
"/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py",
line 83, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)
Klaus
Apparently Analagous Threads
- drs replicate to Windows 2003 DC fails with WERR_DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT and WERR_DS_DRA_ACCESS_DENIED
- Samba AD DC initial join fails at schema replication
- Failure to join existing domain Windows 2003 Server domain
- Exchange setup failure
- Joining Samba4 to Domain as DC with Small Business Server 2008 - error with Exchange ldap entries