[Samba] samba-tool drs showrepl shows WERR_BAD_NETPATH

Heinz Allerberger
Tue, 23 Aug 2016 13:36:47 -0000

Hello there,

I have a problem with replication between two domain controllers, dc1
and dc2.
Distribution: Debian 8.5
Samba-Distribution: sernet-samba 4.3.11-14

The replication on dc2 working fine without any failures.
But the synchronization on dc1 gives the failure "WERR_BAD_NETPATH".

Because the message "BAD_NETPATH" I checked the DNS-resolution:
=========================================root at dc1:~#host dc1
dc1.mydomain.uni-frankfurt.de has address 192.168.151.230

root at dc1:~# host dc2
dc2.mydomain.uni-frankfurt.de has address 192.168.151.231

host -t SRV _kerberos._tcp.mydomain.uni-frankfurt.de
_kerberos._tcp.mydomain.uni-frankfurt.de has SRV record 0 100 88
dc1.mydomain.uni-frankfurt.de.
_kerberos._tcp.mydomain.uni-frankfurt.de has SRV record 0 100 88
dc2.mydomain.uni-frankfurt.de.

root at dc1:~# host -t SRV _ldap._tcp.mydomain.uni-frankfurt.de
_ldap._tcp.mydomain.uni-frankfurt.de has SRV record 0 100 389
dc1.mydomain.uni-frankfurt.de.
_ldap._tcp.mydomain.uni-frankfurt.de has SRV record 0 100 389
dc2.mydomain.uni-frankfurt.de.


OUTBOUND-replication on dc1 show me any failures:
===============================root at dc1:~# samba-tool drs showrepl
Default-First-Site-Name\DC1
DSA Options: 0x00000001
DSA object GUID: 1ae9c878-4d33-417a-9995-061189db4f8d
DSA invocationId: dff09274-9c24-49c6-beb5-647561d5d893

==== INBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:19:25 2016 CEST was
successful
                 0 consecutive failure(s).
                 Last success @ Mon Aug 22 16:19:25 2016 CEST
....

==== OUTBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:20:14 2016 CEST failed,
result 53 (WERR_BAD_NETPATH)
                 37 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=DomainDnsZones,DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:20:14 2016 CEST failed,
result 53 (WERR_BAD_NETPATH)
                 37 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:20:14 2016 CEST failed,
result 53 (WERR_BAD_NETPATH)
                 37 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:20:14 2016 CEST failed,
result 53 (WERR_BAD_NETPATH)
                 37 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=mydomain,DC=uni-frankfurt,DC=de
         Default-First-Site-Name\dc2 via RPC
                 DSA object GUID: e4da82c7-5d42-4011-8733-00a9dffb6633
                 Last attempt @ Mon Aug 22 16:20:14 2016 CEST failed,
result 53 (WERR_BAD_NETPATH)
                 37 consecutive failure(s).
                 Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ===
Connection --
         Connection name: 1367f590-6672-4807-bc27-2ac167d40a88
         Enabled        : TRUE
         Server DNS name : dc2.mydomain.uni-frankfurt.de
         Server DN name  : CN=NTDS
Settings,CN=dc2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=uni-frankfurt,DC=de
                 TransportType: RPC
                 options: 0x00000001
Warning: No NC replicated for Connection!

Best regards
Heinz