[Samba] Dead Domain Controller server

Andrew Bartlett
Wed, 23 Dec 2015 08:43:31 -0000

On Tue, 2015-12-22 at 15:30 -0200, Lucas Peruchi wrote:
> Good afternoon,
>
> I have an environment with 4 servers samba 4 and yesterday one of
> them died, I tried removing it and not found, then recreated the
> server with the same name and joined him as a DC, however, he created
> a new uuid and sync entres servers I stopped, I had to force a forced
> sync:
>
> # samba-tool drs replicate samba02 samba01 DC=example,DC=com,DC=br
> # samba-tool drs replicate samba03 samba01 DC=example,DC=com,DC=br
> # samba-tool drs replicate samba04 samba01 DC=example,DC=com,DC=br
>
> And also performed in the 4 servers:
>
> # samba_dnsupdate --verbose --all-names
> # samba-tool dbcheck
> Checking 4376 objects
> Checked 4376 objects (0 errors)
>
> But still an error occurs:
>
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for
> ncacn_ip_tcp:192.168.0.195[1024,seal,krb5,target_hostname=092bc931
> -4e23-416d-bc04-218e3fc8ef62._msdcs.example.com.br,target_principal=E
> 3514235-4B06-11D1-AB04-00C04FC2DCD2/092bc931-4e23-416d-bc04
> -218e3fc8ef62/example.com.br at example.com.br,abstract_syntax=e3514235
> -4b06-11d1-ab04-00c04fc2dcd2/0x00000004,localaddress=192.168.0.5]
> NT_STATUS_INVALID_PARAMETER
>
> This error is showing every second in the log, have a safe way to
> remove the old domain server? As I should have proceeded to remove a
> dead DC Samba4 server domain?
>
> Samba: 4.3.3
> S.O: Centos 7
> Bind: 9.9.4-29

Samba git master (and so 4.4 when we release it) has a new 'samba-tool
domain demote --remove-other-dead-server' option designed to clean up
exactly this.

Thanks,

Andrew Bartlett

--
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba