[Samba] Dead Domain Controller server

L.P.H. van Belle
Wed, 23 Dec 2015 08:23:53 -0000

Hai,

The errors you see is because of installing with the same name.

Best thing todo, remove the just installed dc from the AD and DNS.

In order..
Sieze the FSMO roles, put them on an other dc.
Wait/resync all DC.s

On the just installed server,
Remove it from the domain again.
Change the hostname ( you can still use the same ip )
Reboot, and rejoin the domain.
Create an CNAME for the old name to the new name the stay compatible.
Resync the DC's, (at least check it.)

That should fix it.

Greetz,

Loius

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Lucas Peruchi
> Verzonden: dinsdag 22 december 2015 18:31
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Dead Domain Controller server
>
> Good afternoon,
>
> I have an environment with 4 servers samba 4 and yesterday one of them
> died, I tried removing it and not found, then recreated the server with
> the same name and joined him as a DC, however, he created a new uuid and
> sync entres servers I stopped, I had to force a forced sync:
>
> # samba-tool drs replicate samba02 samba01 DC=example,DC=com,DC=br
> # samba-tool drs replicate samba03 samba01 DC=example,DC=com,DC=br
> # samba-tool drs replicate samba04 samba01 DC=example,DC=com,DC=br
>
> And also performed in the 4 servers:
>
> # samba_dnsupdate --verbose --all-names
> # samba-tool dbcheck
> Checking 4376 objects
> Checked 4376 objects (0 errors)
>
> But still an error occurs:
>
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for
> ncacn_ip_tcp:192.168.0.195[1024,seal,krb5,target_hostname=092bc931-4e23-
> 416d-bc04-218e3fc8ef62._msdcs.example.com.br,target_principal=E3514235-
> 4B06-11D1-AB04-00C04FC2DCD2/092bc931-4e23-416d-bc04-
> 218e3fc8ef62/example.com.br at
example.com.br,abstract_syntax=e3514235-4b06-
> 11d1-ab04-00c04fc2dcd2/0x00000004,localaddress=192.168.0.5]
> NT_STATUS_INVALID_PARAMETER
>
> This error is showing every second in the log, have a safe way to remove
> the old domain server? As I should have proceeded to remove a dead DC
> Samba4 server domain?
>
> Samba: 4.3.3
> S.O: Centos 7
> Bind: 9.9.4-29
>
>
> Thank you for your help!
>
>
> Atenciosamente,
>
> Lucas M. Peruchi
> Tecnologia da Informação e Comunicação
> Fundação Parque Tecnológico Itaipu ? Brasil
> Contato: +55 (45) 3576-7231 / +55 (45) 9151-5497
> www.pti.org.br
>
> "A Fundação Parque Tecnológico Itaipu - Brasil esclarece que, por
força do
> seu Estatuto, a presente mensagem não implica a assunção de obrigações em
> seu nome."
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba