samba - Jan 2018 - Replication Error

Hi

I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
AD 4.7.2 The Inbound replication on the Server-1 is failing with the error
below:

DC=iumnet,DC=edu,DC=na
        Default-First-Site-Name\Server-2 via RPC
                DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
                Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed, result
58 (WERR_BAD_NET_RESP)
                15333 consecutive failure(s).
                Last success @ Wed Nov 22 13:48:30 2017 WAST

Please help to fix it.

Thanks n Regards

*Harsh Kukreja *Systems Administrator
*International University of Namibia *Tel: 061-4336000 - E-mail: h.kukreja
@ium.edu.na - Web:
*http://www.ium.edu.na <http://www.ium.edu.na/>*Private Bag
14005,Bachbrech. 21-31 Hercules Street, Dorado Park, Windhoek, NAMIBIA

Hi Harsh,
> I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
> AD 4.7.2 The Inbound replication on the Server-1 is failing with the error
> below:
>
> DC=iumnet,DC=edu,DC=na
>         Default-First-Site-Name\Server-2 via RPC
>                 DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
>                 Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed, result
> 58 (WERR_BAD_NET_RESP)
>                 15333 consecutive failure(s).
>                 Last success @ Wed Nov 22 13:48:30 2017 WAST
>
> Please help to fix it.
sorry, my crystal ball is on maintenance. We'll need some more 
information. Increase your log level by adding the following line to 
smb.conf:
	log level = 9 dns:0

It's going to be very verbose. You'll usually get the entry having 
replication issue at the end of the replication log.

By the way, you'll should upgrade to 4.7.4, there has been quite a few 
bug fixes since 4.7.2.

Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?

Cheers,

Denis

-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

Hi Denis

Thanks for your response without your crystal ball.

I have increased the log level =9 dns:0 on both the servers. It replicates
successfully by manually running the command
 samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync

but it is still failing when I check from the samba-tool drs showrepl

Also I run samba-tool dbcheck --cross-ncs --fix on both the servers which
didn't fix it. Please let me know how to check the replication Logs.

I will upgrade to the latest 4.7.4 to see if it fixes the problem.

On some of the Win7 clients after the password reset when the user changes
their password on the logon screen it keeps on saying " Your Password has
expired and must be Changed" even after the password is changed. What can
be the reason behind this issue.

Regards

Harsh

*Harsh Kukreja *Systems Administrator
*International University of Namibia *Tel: 061-4336000 - E-mail: h.kukreja
@ium.edu.na - Web:
*http://www.ium.edu.na <http://www.ium.edu.na/>*Private Bag
14005,Bachbrech. 21-31 Hercules Street, Dorado Park, Windhoek, NAMIBIA






On Tue, Jan 9, 2018 at 1:22 PM, Denis Cardon <dcardon at tranquil.it>
wrote:
> Hi Harsh,
>
> I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
>> AD 4.7.2 The Inbound replication on the Server-1 is failing with the
error
>> below:
>>
>> DC=iumnet,DC=edu,DC=na
>>         Default-First-Site-Name\Server-2 via RPC
>>                 DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
>>                 Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed,
>> result
>> 58 (WERR_BAD_NET_RESP)
>>                 15333 consecutive failure(s).
>>                 Last success @ Wed Nov 22 13:48:30 2017 WAST
>>
>> Please help to fix it.
>>
>
> sorry, my crystal ball is on maintenance. We'll need some more
> information. Increase your log level by adding the following line to
> smb.conf:
>         log level = 9 dns:0
>
> It's going to be very verbose. You'll usually get the entry having
> replication issue at the end of the replication log.
>
> By the way, you'll should upgrade to 4.7.4, there has been quite a few
bug
> fixes since 4.7.2.
>
> Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?
>
> Cheers,
>
> Denis
>
> --
> Denis Cardon
> Tranquil IT Systems
> Les Espaces Jules Verne, bâtiment A
> 12 avenue Jules Verne
> 44230 Saint Sébastien sur Loire
> tel : +33 (0) 2.40.97.57.55
> http://www.tranquil-it-systems.fr
>
>