thr3ads.net - samba - [Samba] AD replication issue [Mar 2017]

If this information is useful, please help other people find it:
Share via:

Arthur Ramsey

2017-Mar-13 23:54 UTC

[Samba] AD replication issue

I forgot to associate inter-site links (all using default), which fixed 
a lot though I'm still having an issue.

  * vsc site
      o vsc-dc01
      o vsc-dc02
  * aws site
      o aws-dc01
  * epo site
      o epo-dc01

  * vsc-dc01 => anywhere: OK
  * vsc-dc02 => anywhere: not replicating
  * aws-dc01 => anywhere: OK
  * epo-dc01 => anywhere: OK

I've tried with samba_kcc = false and true.

Thanks,
Arthur


This e-mail and any attachments may contain CONFIDENTIAL information, including
PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or
disclosure of this information is STRICTLY PROHIBITED; you are requested to
delete this e-mail and any attachments, notify the sender immediately, and
notify the Mediture Privacy Officer at privacyofficer at mediture.com.

lingpanda101

2017-Mar-14 11:17 UTC

head link

[Samba] AD replication issue

On 3/13/2017 7:54 PM, Arthur Ramsey via samba wrote:> I forgot to associate inter-site links (all using default), which 
> fixed a lot though I'm still having an issue.
>
>  * vsc site
>      o vsc-dc01
>      o vsc-dc02
>  * aws site
>      o aws-dc01
>  * epo site
>      o epo-dc01
>
>  * vsc-dc01 => anywhere: OK
>  * vsc-dc02 => anywhere: not replicating
>  * aws-dc01 => anywhere: OK
>  * epo-dc01 => anywhere: OK
>
> I've tried with samba_kcc = false and true.
>
> Thanks,
> Arthur
>
>
> This e-mail and any attachments may contain CONFIDENTIAL information, 
> including PROTECTED HEALTH INFORMATION. If you are not the intended 
> recipient, any use or disclosure of this information is STRICTLY 
> PROHIBITED; you are requested to delete this e-mail and any 
> attachments, notify the sender immediately, and notify the Mediture 
> Privacy Officer at privacyofficer at mediture.com.
Attempt to manually replicate and see if it corrects your issue.

https://wiki.samba.org/index.php/Samba-tool_drs_replicate

If this doesn't work you can attempt to stop and start the replication 
process. I'll explain if needed but I have never actually needed to do 
it myself.

-- 
- James

lingpanda101

2017-Mar-14 11:23 UTC

head link

[Samba] AD replication issue

On 3/13/2017 7:54 PM, Arthur Ramsey via samba wrote:> I forgot to associate inter-site links (all using default), which 
> fixed a lot though I'm still having an issue.
>
>  * vsc site
>      o vsc-dc01
>      o vsc-dc02
>  * aws site
>      o aws-dc01
>  * epo site
>      o epo-dc01
>
>  * vsc-dc01 => anywhere: OK
>  * vsc-dc02 => anywhere: not replicating
>  * aws-dc01 => anywhere: OK
>  * epo-dc01 => anywhere: OK
>
> I've tried with samba_kcc = false and true.
>
> Thanks,
> Arthur
>
>
> This e-mail and any attachments may contain CONFIDENTIAL information, 
> including PROTECTED HEALTH INFORMATION. If you are not the intended 
> recipient, any use or disclosure of this information is STRICTLY 
> PROHIBITED; you are requested to delete this e-mail and any 
> attachments, notify the sender immediately, and notify the Mediture 
> Privacy Officer at privacyofficer at mediture.com.
I will add that samba will no longer create a full mesh topology to all 
DC's by default. This is assuming you have setup sites and services 
correctly. Should you require a full mesh, that is where you would 
invoke  "kccsrv:samba_kcc=false" in your smb.conf.

-- 
- James

Arthur Ramsey

2017-Mar-14 14:00 UTC

head link

[Samba] AD replication issue

Manual replication works, but it doesn't stay in sync afterwards.

Thanks,
Arthur

This e-mail and any attachments may contain CONFIDENTIAL information, including
PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or
disclosure of this information is STRICTLY PROHIBITED; you are requested to
delete this e-mail and any attachments, notify the sender immediately, and
notify the Mediture Privacy Officer at privacyofficer at mediture.com.

lingpanda101

2017-Mar-14 14:16 UTC

head link

[Samba] AD replication issue

On 3/13/2017 7:54 PM, Arthur Ramsey via samba wrote:> I forgot to associate inter-site links (all using default), which 
> fixed a lot though I'm still having an issue.
>
>  * vsc site
>      o vsc-dc01
>      o vsc-dc02
>  * aws site
>      o aws-dc01
>  * epo site
>      o epo-dc01
>
>  * vsc-dc01 => anywhere: OK
>  * vsc-dc02 => anywhere: not replicating
>  * aws-dc01 => anywhere: OK
>  * epo-dc01 => anywhere: OK
>
> I've tried with samba_kcc = false and true.
>
> Thanks,
> Arthur
>
>
> This e-mail and any attachments may contain CONFIDENTIAL information, 
> including PROTECTED HEALTH INFORMATION. If you are not the intended 
> recipient, any use or disclosure of this information is STRICTLY 
> PROHIBITED; you are requested to delete this e-mail and any 
> attachments, notify the sender immediately, and notify the Mediture 
> Privacy Officer at privacyofficer at mediture.com.
What is the output of 'samba-tool drs showrepl' for vsc-dc02? You can 
manually start and stop replication by issuing

samba-tool drs options vsc-dc02 --dsa-option={+|-}IS_GC | 
{+|-}DISABLE_INBOUND_REPL | {+|-}DISABLE_OUTBOUND_REPL

I assume now when you create an object on lets say vsc-dc01, it does not 
replicate to vsc-dc02?


-- 
- James

Arthur Ramsey

2017-Mar-14 14:29 UTC

head link

[Samba] AD replication issue

Changes replicate to it, but not from it.

vsc\VSC-DC02
DSA Options: 0x00000001
DSA object GUID: fe066b13-6f9e-4f3c-beb4-37df1292b8cb
DSA invocationId: 8a2b1405-07b1-4d92-89dd-1d993e59e378

==== INBOUND NEIGHBORS ===
DC=DomainDnsZones,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ Tue Mar 14 09:26:12 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:26:12 2017 CDT

DC=DomainDnsZones,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ Tue Mar 14 09:25:09 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:25:09 2017 CDT

DC=DomainDnsZones,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ Tue Mar 14 09:25:06 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:25:06 2017 CDT

DC=ForestDnsZones,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ Tue Mar 14 09:26:14 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:26:14 2017 CDT

DC=ForestDnsZones,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ Tue Mar 14 09:24:42 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:42 2017 CDT

DC=ForestDnsZones,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ Tue Mar 14 09:24:42 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:42 2017 CDT

DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ Tue Mar 14 09:26:37 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:26:37 2017 CDT

DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ Tue Mar 14 09:25:07 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:25:07 2017 CDT

DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ Tue Mar 14 09:25:11 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:25:11 2017 CDT

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ Tue Mar 14 09:26:47 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:26:47 2017 CDT

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ Tue Mar 14 09:24:44 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:44 2017 CDT

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ Tue Mar 14 09:24:44 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:44 2017 CDT

CN=Configuration,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ Tue Mar 14 09:26:55 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:26:55 2017 CDT

CN=Configuration,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ Tue Mar 14 09:24:45 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:45 2017 CDT

CN=Configuration,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ Tue Mar 14 09:24:45 2017 CDT was successful
                 0 consecutive failure(s).
                 Last success @ Tue Mar 14 09:24:45 2017 CDT

==== OUTBOUND NEIGHBORS ===
DC=DomainDnsZones,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=DomainDnsZones,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=DomainDnsZones,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=ForestDnsZones,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=ForestDnsZones,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=ForestDnsZones,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=mediture,DC=dom
         vsc\DC01 via RPC
                 DSA object GUID: da9bb168-47a0-4368-aff3-bf06d1b869d2
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=mediture,DC=dom
         aws\AWS-DC01 via RPC
                 DSA object GUID: 8b750a53-3d39-4bc0-8fe9-9bffa9e413aa
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=mediture,DC=dom
         epo\EPO-DC01 via RPC
                 DSA object GUID: 28f7281f-3955-4885-8a7d-42a36ee87590
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ===
Connection --
         Connection name: 298f5484-0e2d-46a1-9505-dfe5eecc1824
         Enabled        : TRUE
         Server DNS name : epo-dc01.mediture.dom
         Server DN name  : CN=NTDS
Settings,CN=EPO-DC01,CN=Servers,CN=epo,CN=Sites,CN=Configuration,DC=mediture,DC=dom
                 TransportType: RPC
                 options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
         Connection name: 42b18310-000a-498f-911f-d57443724681
         Enabled        : TRUE
         Server DNS name : aws-dc01.mediture.dom
         Server DN name  : CN=NTDS
Settings,CN=AWS-DC01,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mediture,DC=dom
                 TransportType: RPC
                 options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
         Connection name: a96959e9-3a45-4d04-a0d4-9e5b889bb814
         Enabled        : TRUE
         Server DNS name : epo-dc01.mediture.dom
         Server DN name  : CN=NTDS
Settings,CN=EPO-DC01,CN=Servers,CN=epo,CN=Sites,CN=Configuration,DC=mediture,DC=dom
                 TransportType: RPC
                 options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
         Connection name: c2876275-54a6-4eaa-9da1-0c84f24d1b2c
         Enabled        : TRUE
         Server DNS name : dc01.mediture.dom
         Server DN name  : CN=NTDS
Settings,CN=DC01,CN=Servers,CN=vsc,CN=Sites,CN=Configuration,DC=mediture,DC=dom
                 TransportType: RPC
                 options: 0x00000001
Warning: No NC replicated for Connection!


This e-mail and any attachments may contain CONFIDENTIAL information, including
PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or
disclosure of this information is STRICTLY PROHIBITED; you are requested to
delete this e-mail and any attachments, notify the sender immediately, and
notify the Mediture Privacy Officer at privacyofficer at mediture.com.

samba - Mar 2017 - AD replication issue

[Samba] AD replication issue

[Samba] AD replication issue

[Samba] AD replication issue

[Samba] AD replication issue

[Samba] AD replication issue

[Samba] AD replication issue