samba - Aug 2017 - Fw: Re: Made a join with a netbios name, which already existed, now replication errors

> But with the DNS-Tool from Windows I can see a lot of entries for samba3,
all of them for services like _gc, _kerberos, _ldap, _kpasswd.
Cleaned the DNS manually with the DNS application, but still I can't join.
Same error.

> Cleaned the DNS manually with the DNS application, but still I can't
join. Same error.
I thought it was the same error, but now I saw there is a small difference.
It seems like a deleted object causes the problem.
With "ldbsearch --cross-ncs --show-deleted .." I can see now that
entry for "samba3" (beside all other demoted servers),
which appears in the error message.

Can I delete that already deleted object with ldbdel just like a
"normal" object ?

Regards



samba-tool domain join domain.university.de DC -U"administrator"
--dns-backend=SAMBA_INTERNAL

...
Unxpectedly got mismatching RDN values when checking RDN against name of CN=NTDS
Settings,CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=deFailed
to convert object CN=NTDS
Settings,CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de:
WERR_GEN_FAILURE
Failed to convert objects: WERR_GEN_FAILURE
Join failed - cleaning up
Deleted CN=SAMBA6,OU=Domain Controllers,DC=domain,DC=university,DC=de
Deleted CN=NTDS
Settings,CN=SAMBA6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de
Deleted
CN=SAMBA6,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de
ERROR(runtime): uncaught exception - (31, "Failed to process
'chunk' of DRS replicated objects: WERR_GEN_FAILURE")
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 661, in run
    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1269,
in join_DC
    ctx.do_join()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1177,
in do_join
    ctx.join_replicate()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 895,
in join_replicate
    replica_flags=ctx.replica_flags)
  File "/usr/lib64/python2.7/site-packages/samba/drs_utils.py", line
258, in replicate
    schema=schema, req_level=req_level, req=req)



ldbsearch --cross-ncs --show-deleted -H /var/lib/samba/private/sam.ldb
"distinguishedName=CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de"

# record 1
dn:
CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de
objectClass: top
objectClass: server
instanceType: 4
whenCreated: 20170731105400.0Z
uSNCreated: 529616
objectGUID: e4ee9112-7457-47e9-a603-13a1c762cecf
systemFlags: 1375731712
dNSHostName: samba3.domain.university.de
isDeleted: TRUE
lastKnownParent:
CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de
isRecycled: TRUE
cn:: ISAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf
name:: ISAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf
whenChanged: 20170801122422.0Z
uSNChanged: 529940
distinguishedName:
CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=de

# returned 1 records
# 1 entries
# 0 referrals

On Wed, 2 Aug 2017 08:50:38 +0200
gizmo via samba <samba at lists.samba.org> wrote:
> > Cleaned the DNS manually with the DNS application, but still I
> > can't join. Same error.
> 
> I thought it was the same error, but now I saw there is a small
> difference. It seems like a deleted object causes the problem.
> With "ldbsearch --cross-ncs --show-deleted .." I can see now that
> entry for "samba3" (beside all other demoted servers), which
appears
> in the error message.
> 
> Can I delete that already deleted object with ldbdel just like a
> "normal" object ?
> 
> ...
> Unxpectedly got mismatching RDN values when checking RDN against name
> of CN=NTDS
>
Settings,CN=SAMBA3\0ADEL:e4ee9112-7457-47e9-a603-13a1c762cecf,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=university,DC=deFailed
No you cannot delete something that is already deleted, but then
deleted objects should be ignored and I think this is fixed in later
versions.

Does your Samba version have 'samba-tool domain tombstones expunge' ?
if it does, you can set the '--tombstone-lifetime' to 1 day and then
wait, all the 'OADEL' objects should disappear.

Rowland