Hello, Checking on the health of my DC's I ran samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator This returned several failure results for both Domain and Configuration. Similar to the following Comparing: 'CN=Incoming Forest Trust Builders,CN=Builtin,DC=domain,DC=local' [ldap://dc1] 'CN=Incoming Forest Trust Builders,CN=Builtin,DC=domain,DC=local' [ldap://dc2] Difference in attribute values: whenChanged => ['20150216131956.0Z'] ['20150216132002.0Z'] FAILED Comparing: 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc1] 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc2] Difference in attribute values: whenChanged => ['20140210152406.0Z'] ['20140211190226.0Z'] FAILED All other tests completed with success. Already tried using 'samba-tool drs replicate'. That seemed to complete but I still receive the same failed results when comparing. Any ideas? Thanks. -- -James
Marc Muehlfeld
2015-Apr-28 20:22 UTC
[Samba] ldap replication failure for Domain and Configuration
Hello James, Am 28.04.2015 um 21:58 schrieb James:> Comparing: > 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc1] > 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc2] > Difference in attribute values: > whenChanged => > ['20140210152406.0Z'] > ['20140211190226.0Z'] > FAILEDThe value of the attribute 'whenChanged' isn't replicated. See https://msdn.microsoft.com/en-us/library/ms680921%28v=vs.85%29.aspx Regards, Marc
On 4/28/2015 4:22 PM, Marc Muehlfeld wrote:> Hello James, > > Am 28.04.2015 um 21:58 schrieb James: >> Comparing: >> 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc1] >> 'CN=Users,CN=Builtin,DC=domain,DC=local' [ldap://dc2] >> Difference in attribute values: >> whenChanged => >> ['20140210152406.0Z'] >> ['20140211190226.0Z'] >> FAILED > > > The value of the attribute 'whenChanged' isn't replicated. See > https://msdn.microsoft.com/en-us/library/ms680921%28v=vs.85%29.aspx > > > Regards, > MarcThank you Marc. I was not aware. Issuing command with --filter=whenchanged results in SUCCESS. -- -James