samba - Oct 2015 - How to fix Failed to find attribute in schema for attrid in replPropertyMetaData

I had a AD with 4 Win2003 DC. Now I use a samba4 server as a additional DC.
Samba4 server system version: ubuntu 15.04
Samba version: samba 4.3.0
The replication from win2003 DC to samba4 DC was success. But have some problem
from samba4 DC to win2003 DC. I can run

samba-tool drs showrepl

without error. But in log.samba it can found many message like: 

[2015/10/09 12:53:11.562088,  0]
../source4/rpc_server/drsuapi/getncchanges.c:259(get_nc_changes_build_object)
  ../source4/rpc_server/drsuapi/getncchanges.c:259: Failed to find attribute in
schema for attrid 33816623 mentioned in replPropertyMetaData of
CN=officeuser,OU=MailUsers,DC=mydomain,DC=org

I can't just delete the user, and don't know how to edit
replPropertyMetaData. I think this error caused the replication from samba4 DC
to win2003 DC fail.
How can I fix these error?

On Fri, 2015-10-09 at 13:30 +0800, Skin wrote:
> I had a AD with 4 Win2003 DC. Now I use a samba4 server as a
> additional DC.
> Samba4 server system version: ubuntu 15.04
> Samba version: samba 4.3.0
> The replication from win2003 DC to samba4 DC was success. But have
> some problem from samba4 DC to win2003 DC. I can run 
> 
> samba-tool drs showrepl
> 
> without error. But in log.samba it can found many message like: 
> 
> [2015/10/09 12:53:11.562088,  0]
> ../source4/rpc_server/drsuapi/getncchanges.c:259(get_nc_changes_build
> _object)
>   ../source4/rpc_server/drsuapi/getncchanges.c:259: Failed to find
> attribute in schema for attrid 33816623 mentioned in
> replPropertyMetaData of CN=officeuser,OU=MailUsers,DC=mydomain,DC=org
> 
> I can't just delete the user, and don't know how to edit
> replPropertyMetaData. I think this error caused the replication from
> samba4 DC to win2003 DC fail. 
> How can I fix these error?
What does running dbcheck on that DC say?

Has that object got any attributes from custom schema?

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

I use a wrong mailbox(skinz at 163.com) sent the first mail, now I use
back my regular mail(opaperjam at gmail.com).
> What does running dbcheck on that DC say?
I had run

bin/samba-tool dbcheck --cross-ncs --fix

It kept telling me some thing like:

ERROR: attributeID 0X2040060 is not known in our schema, not fixing
replPropertyMetaData on CN=officeuser,OU=MailUsers,DC=mydomain,DC=org
>
> Has that object got any attributes from custom schema?
I don't know how to custom schema. But my AD is run over 10 years, and
it is from 2000 upgrade to 2003, and it still have exchange2000 for
running. Maybe it's schema is complex.
>
> Thanks,
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                       http://samba.org/~abartlet/
> Authentication Developer, Samba Team  http://samba.org
> Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba
>
Thanks for your reply.