samba - Mar 2017 - Samba 4.5.5, Bug#12600, & those dangling links

I have updated one of my S4 DCs to 4.5.5, somewhat excited about the  
line in the ChangeLog

  * Bug #12600 - dbcheck does not find or fix dangling links on live objects

Do I misunderstand the scope of this bug?

# samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls
...
ERROR: no target object found for GUID component for member in object  
CN=Domain Users,CN=Users,XXXXX -  
<GUID=ff4a20f8e2de284a8db62a5515c3b88f>;<RMD_ADDTIME=130675406960000000>;<RMD_CHANGETIME=130675406960000000>;<RMD_FLAGS=0>;<RMD_INVOCID=b0ebe9ea9b42de448582c58abdf611ce>;<RMD_LOCAL_USN=26155>;<RMD_ORIGINATING_USN=26155>;<RMD_VERSION=0>;CN=mharris,OU=Industries
Users,XXXXX
Not removing dangling forward link
...

# rpm -qa | grep sernet
sernet-samba-common-4.5.5-14.el6.x86_64
sernet-samba-client-4.5.5-14.el6.x86_64
sernet-samba-ad-4.5.5-14.el6.x86_64
sernet-samba-libs-4.5.5-14.el6.x86_64
sernet-samba-4.5.5-14.el6.x86_64
sernet-samba-winbind-4.5.5-14.el6.x86_64
sernet-build-key-1.1-5.noarch
sernet-samba-libsmbclient0-4.5.5-14.el6.x86_64

It appears it still does not remove the dangling link.

On 3/6/2017 8:56 AM, Adam Tauno Williams via samba
wrote:
> I have updated one of my S4 DCs to 4.5.5, somewhat excited about the 
> line in the ChangeLog
>
>  * Bug #12600 - dbcheck does not find or fix dangling links on live 
> objects
>
> Do I misunderstand the scope of this bug?
>
> # samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls
> ...
> ERROR: no target object found for GUID component for member in object 
> CN=Domain Users,CN=Users,XXXXX - 
>
<GUID=ff4a20f8e2de284a8db62a5515c3b88f>;<RMD_ADDTIME=130675406960000000>;<RMD_CHANGETIME=130675406960000000>;<RMD_FLAGS=0>;<RMD_INVOCID=b0ebe9ea9b42de448582c58abdf611ce>;<RMD_LOCAL_USN=26155>;<RMD_ORIGINATING_USN=26155>;<RMD_VERSION=0>;CN=mharris,OU=Industries
> Users,XXXXX
> Not removing dangling forward link
> ...
>
> # rpm -qa | grep sernet
> sernet-samba-common-4.5.5-14.el6.x86_64
> sernet-samba-client-4.5.5-14.el6.x86_64
> sernet-samba-ad-4.5.5-14.el6.x86_64
> sernet-samba-libs-4.5.5-14.el6.x86_64
> sernet-samba-4.5.5-14.el6.x86_64
> sernet-samba-winbind-4.5.5-14.el6.x86_64
> sernet-build-key-1.1-5.noarch
> sernet-samba-libsmbclient0-4.5.5-14.el6.x86_64
>
> It appears it still does not remove the dangling link.
>
>
>
I believe you have to run

samba-tool domain tombstones expunge

-- 
- James

Quoting lingpanda101 via samba <samba at
lists.samba.org>:
> On 3/6/2017 8:56 AM, Adam Tauno Williams via samba wrote:
>> I have updated one of my S4 DCs to 4.5.5, somewhat excited about  
>> the line in the ChangeLog
>> * Bug #12600 - dbcheck does not find or fix dangling links on live
objects
>> Do I misunderstand the scope of this bug?
>> # samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls
>> ...
>> Not removing dangling forward link
>> ...
> I believe you have to run
> samba-tool domain tombstones expunge
[root at larkin27 ~]# samba-tool domain tombstones expunge
Doing a full scan on CN=Configuration,DC=micore,DC=us and looking for  
deleted objects
Doing a full scan on DC=micore,DC=us and looking for deleted objects
Doing a full scan on DC=DomainDnsZones,DC=micore,DC=us and looking for  
deleted objects
Doing a full scan on DC=ForestDnsZones,DC=micore,DC=us and looking for  
deleted objects
Removed 0 objects and 0 links successfully

samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls --yes
Checking 8556 objects
ERROR: no target object found for GUID component for member in object  
CN=Domain Users,CN=Users,DC=micore,DC=us -  
<GUID=8c8edc4a48dbd9469a551f222350d4fa>;<RMD_ADDTIME=130652927140000000>;<RMD_CHANGETIME=130652927140000000>;<RMD_FLAGS=0>;<RMD_INVOCID=b0ebe9ea9b42de448582c58abdf611ce>;<RMD_LOCAL_USN=23218>;<RMD_ORIGINATING_USN=23218>;<RMD_VERSION=0>;CN=mstudtma,OU=Industries
Users,DC=micore,DC=us
Not removing dangling forward link

No change.