samba - Feb 2015 - Samba4 - Corrupted group caused stop of replication - "Object class violation"

Hi Samba List! 

We are using Samba Version 4.1.12 on two master DC.


We've noticed that a corrupted group has been created, we tried to
delete it, and since then, the replication fail between the two DC.


The result of the command : "samba-tool drs showrepl" is the following
: 

On the first DC, INBOUND NEIGHBORS : 

Last attempt @ Wed Feb 4
11:26:41 2015 CET failed, result 58 (WERR_BAD_NET_RESP)
235 consecutive
failure(s). 

On the same DC, log level at 5, we've got the following
errors trying to force replication : 

The command : 

./samba-tool drs
replicate FirstDC SecondDC dc=fhm,dc=local 

The result in the samba log
: 

 ldb: No objectClass found in replPropertyMetaData for
CN=gastroenterologie_sADEL:dd657361-ee30-409c-a8fe-388884a55e6a,CN=Deleted
Objects,DC=fhm,DC=local!

[2015/02/04 11:36:37.309435, 0]
../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit)

Failed to apply records: replmd_replicated_apply_add: error during DRS
repl ADD: replmd_replicated_apply_add: error during DRS repl ADD:
replmd_replicated_apply_add: error during DRS repl ADD:
replmd_replicated_apply_add: error duri: Object class
violation
[2015/02/04 11:36:37.310110, 0]
../source4/dsdb/repl/drepl_out_helpers.c:733(dreplsrv_op_pull_source_apply_changes_trigger)

Failed to commit objects:
WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2015/02/04
11:36:37.310755, 4]
../source4/dsdb/repl/drepl_out_pull.c:178(dreplsrv_pending_op_callback)

dreplsrv_op_pull_source(WERR_BAD_NET_RESP) for DC=fhm,DC=local 

The
replication works one-way, from FirstDC to SecondDC 

Note that the
"samba-tool checkdb" return no errors on both DC. 

Is there a way to
clean the corrupted database on the DC which seems not working properly
? 

Thanks a lot in advance for your help. 

Cheers, 
--

Olivier

On Wed, 2015-02-04 at 11:46 +0100, Olivier BILHAUT
wrote:
>  
> Hi Samba List! 
> 
> We are using Samba Version 4.1.12 on two master DC.
> 
> 
> We've noticed that a corrupted group has been created, we tried to
> delete it, and since then, the replication fail between the two DC.
> 
> 
> The result of the command : "samba-tool drs showrepl" is the
following
> : 
> 
> On the first DC, INBOUND NEIGHBORS : 
> 
> Last attempt @ Wed Feb 4
> 11:26:41 2015 CET failed, result 58 (WERR_BAD_NET_RESP)
> 235 consecutive
> failure(s). 
> 
> On the same DC, log level at 5, we've got the following
> errors trying to force replication : 
> 
> The command : 
> 
> ./samba-tool drs
> replicate FirstDC SecondDC dc=fhm,dc=local 
> 
> The result in the samba log
> : 
> 
>  ldb: No objectClass found in replPropertyMetaData for
> CN=gastroenterologie_sADEL:dd657361-ee30-409c-a8fe-388884a55e6a,CN=Deleted
> Objects,DC=fhm,DC=local!
> 
> [2015/02/04 11:36:37.309435, 0]
>
../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit)
> 
> Failed to apply records: replmd_replicated_apply_add: error during DRS
> repl ADD: replmd_replicated_apply_add: error during DRS repl ADD:
> replmd_replicated_apply_add: error during DRS repl ADD:
> replmd_replicated_apply_add: error duri: Object class
> violation
> [2015/02/04 11:36:37.310110, 0]
>
../source4/dsdb/repl/drepl_out_helpers.c:733(dreplsrv_op_pull_source_apply_changes_trigger)
> 
> Failed to commit objects:
> WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
> [2015/02/04
> 11:36:37.310755, 4]
> ../source4/dsdb/repl/drepl_out_pull.c:178(dreplsrv_pending_op_callback)
> 
> dreplsrv_op_pull_source(WERR_BAD_NET_RESP) for DC=fhm,DC=local 
> 
> The
> replication works one-way, from FirstDC to SecondDC 
You need to force a replication of all objects from FirstDC to SecondDC.
'samba-tool drs replicate --full-sync' should do it. 

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba