Hello smb.conf # Global parameters [global] workgroup = MYSERVER realm = interno.mydomain.com.br netbios name = DC-LINUX server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes ldap server require strong auth = no ntlm auth = yes # Disable Cups load printers = no printing = bsd printcap name = /dev/null disable spoolss = yes [netlogon] path = /opt/samba/var/locks/sysvol/interno.mydomain.com.br/scripts read only = No [sysvol] path = /opt/samba/var/locks/sysvol read only = No ----- samba -b | grep [S]TATEDIR | awk '{print $NF}' /opt/samba/var/locks ----- samba-tool -V 4.6.3 ----- When running dbcheck, I get two uncorrected errors. https://wiki.samba.org/index.php/Updating_Samba#Fixing_Incorrect_Sysvol_and_Directory_ACLs OBS: samba-tool ntacl sysvolreset , I already have another email sent with error information when running it. --------------- samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix Checking 5278 objects ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object CN=35d44b31-0666-4796-bea3-ef9aa9b568fb,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br - <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br Not removing dangling forward link ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object CN=8c87defe-1e9d-4e74-b0cb-3c2c86d546b4,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br - <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br Not removing dangling forward link Checked 5278 objects (2 errors) ------ samba-tool dbcheck --cross-ncs --fix Checking 5278 objects ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object CN=35d44b31-0666-4796-bea3-ef9aa9b568fb,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br - <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br Not removing dangling forward link ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object CN=8c87defe-1e9d-4e74-b0cb-3c2c86d546b4,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br - <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br Not removing dangling forward link Checked 5278 objects (2 errors) ------ Regards
Hello! Any idea ? Regards Em 07-06-2017 14:54, Carlos A. P. Cunha escreveu:> > Hello > > smb.conf > > # Global parameters > [global] > workgroup = MYSERVER > realm = interno.mydomain.com.br > netbios name = DC-LINUX > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, > drepl, winbindd, ntp_signd, kcc, dnsupdate > idmap_ldb:use rfc2307 = yes > ldap server require strong auth = no > ntlm auth = yes > # Disable Cups > load printers = no > printing = bsd > printcap name = /dev/null > disable spoolss = yes > > > [netlogon] > path = /opt/samba/var/locks/sysvol/interno.mydomain.com.br/scripts > read only = No > > [sysvol] > path = /opt/samba/var/locks/sysvol > read only = No > > ----- > > samba -b | grep [S]TATEDIR | awk '{print $NF}' > /opt/samba/var/locks > > ----- > > samba-tool -V > 4.6.3 > > ----- > > When running dbcheck, I get two uncorrected errors. > https://wiki.samba.org/index.php/Updating_Samba#Fixing_Incorrect_Sysvol_and_Directory_ACLs > > OBS: samba-tool ntacl sysvolreset , > I already have another email sent with error information when running it. > > --------------- > > samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix > > Checking 5278 objects > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=35d44b31-0666-4796-bea3-ef9aa9b568fb,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=8c87defe-1e9d-4e74-b0cb-3c2c86d546b4,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > Checked 5278 objects (2 errors) > > ------ > > samba-tool dbcheck --cross-ncs --fix > Checking 5278 objects > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=35d44b31-0666-4796-bea3-ef9aa9b568fb,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=8c87defe-1e9d-4e74-b0cb-3c2c86d546b4,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3-fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_INVOCID=e8c81fc7-2fdf-404a-804c-24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION=0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC=interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > Checked 5278 objects (2 errors) > > ------ > > > Regards >
On Fri, 16 Jun 2017 10:32:08 -0300 "Carlos A. P. Cunha via samba" <samba at lists.samba.org> wrote:> Hello! > > Any idea ? > > Regards >You can ignore the 'Not removing dangling forward link' errors, they do not affect AD. Rowland
On Wed, 2017-06-07 at 14:54 -0300, Carlos A. P. Cunha via samba wrote:> Hello > > > samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix > > Checking 5278 objects > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=35d44b31-0666-4796-bea3- > ef9aa9b568fb,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC > =com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3- > fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_I > NVOCID=e8c81fc7-2fdf-404a-804c- > 24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION> 0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC> interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > ERROR: no target object found for GUID component for > msDS-NC-Replica-Locations in object > CN=8c87defe-1e9d-4e74-b0cb- > 3c2c86d546b4,CN=Partitions,CN=Configuration,DC=interno,DC=MYDOMAIN,DC > =com,DC=br > - > <GUID=272989ef-44e2-471d-8ed3- > fe58f57750c8>;<RMD_ADDTIME=0>;<RMD_CHANGETIME=0>;<RMD_FLAGS=0>;<RMD_I > NVOCID=e8c81fc7-2fdf-404a-804c- > 24fbade3ebde>;<RMD_LOCAL_USN=1>;<RMD_ORIGINATING_USN=1>;<RMD_VERSION> 0>;CN=NTDS > Settings,CN=SERVAD,CN=Servers,CN=Matriz,CN=Sites,CN=Configuration,DC> interno,DC=MYDOMAIN,DC=com,DC=br > Not removing dangling forward link > Checked 5278 objects (2 errors)While it had been thought that these were harmless, it looks like they are causing more trouble now. I have a patch in master and I'm working on some tests, if those go well I'll get a fix backported into 4.7 soon. Sorry, Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba