samba - Mar 2018 - Unable to successfully join Samba 4.8.0 or Windows 2008 R2 to a Samba 4.6.7 DC

This showed up at -d3:

DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is
CN=foo,OU=bar,DC=baz
Failed to apply records: Failed to locally apply remote add of
CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to
re-index servicePrincipalName in CN=blah,OU=blah,DC=blah - (null):
Operations error
Failed to commit objects: WERR_GEN_FAILURE

I've deleted the object in question and the failure just moves on to the
next object in the list.

Justin


On Tue, Mar 13, 2018 at 10:23 PM, Andrew Bartlett <abartlet at samba.org>
wrote:
> On Tue, 2018-03-13 at 15:54 -0400, Justin Foreman via samba wrote:
> > When I attempt to join samba 4.8.0 (stable) to my samba 4.6.7 DC
> (Ubuntu),
> > I receive the following error:
> >
> > Partition[DC=us,DC=dignitastech,DC=com] objects[500/1605]
> > linked_values[0/118]
> > Failed to commit objects: WERR_GEN_FAILURE
>
> > Let me know what type of logging you need from the Samba DC and I can
> > reproduce this.
>
> Carefully turn up the logging with eg -d5 on the command line until you
> get a more useful message about what actually went wrong, taking care
> that at some point it will spit out a dump of the DB containing
> sensitive info, so avoid posting that to a mailing list.
>
> Thanks,
>
> Andrew Bartlett
> --
> Andrew Bartlett
> https://samba.org/~abartlet/
> Authentication Developer, Samba Team         https://samba.org
> Samba Development and Support, Catalyst IT
> https://catalyst.net.nz/services/samba
>
>
>
>
>

Note that I turned up to -d5 but the relevant output didn't seem to
change. I just cleaned up my obfuscation for clarity (all referenced DNs
were identical):

DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is
CN=foo,OU=bar,DC=baz
Failed to apply records: Failed to locally apply remote add of
CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to
re-index servicePrincipalName in CN=foo,OU=bar,DC=baz - (null): Operations
error
Failed to commit objects: WERR_GEN_FAILURE


On Wed, Mar 14, 2018 at 4:46 PM, Justin Foreman <
jforeman at dignitastechnologies.com> wrote:
> This showed up at -d3:
>
> DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is
> CN=foo,OU=bar,DC=baz
> Failed to apply records: Failed to locally apply remote add of
> CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to
> re-index servicePrincipalName in CN=blah,OU=blah,DC=blah - (null):
> Operations error
> Failed to commit objects: WERR_GEN_FAILURE
>
> I've deleted the object in question and the failure just moves on to
the
> next object in the list.
>
> Justin
>
>
> On Tue, Mar 13, 2018 at 10:23 PM, Andrew Bartlett <abartlet at
samba.org>
> wrote:
>
>> On Tue, 2018-03-13 at 15:54 -0400, Justin Foreman via samba wrote:
>> > When I attempt to join samba 4.8.0 (stable) to my samba 4.6.7 DC
>> (Ubuntu),
>> > I receive the following error:
>> >
>> > Partition[DC=us,DC=dignitastech,DC=com] objects[500/1605]
>> > linked_values[0/118]
>> > Failed to commit objects: WERR_GEN_FAILURE
>>
>> > Let me know what type of logging you need from the Samba DC and I
can
>> > reproduce this.
>>
>> Carefully turn up the logging with eg -d5 on the command line until you
>> get a more useful message about what actually went wrong, taking care
>> that at some point it will spit out a dump of the DB containing
>> sensitive info, so avoid posting that to a mailing list.
>>
>> Thanks,
>>
>> Andrew Bartlett
>> --
>> Andrew Bartlett
>> https://samba.org/~abartlet/
>> Authentication Developer, Samba Team         https://samba.org
>> Samba Development and Support, Catalyst IT
>> https://catalyst.net.nz/services/samba
>>
>>
>>
>>
>>
>

On Wed, 2018-03-14 at 16:55 -0400, Justin Foreman wrote:
> Note that I turned up to -d5 but the relevant output didn't seem to
change. I just cleaned up my obfuscation for clarity (all referenced DNs were
identical):
> 
> DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is
CN=foo,OU=bar,DC=baz
> Failed to apply records: Failed to locally apply remote add of
CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to re-index
servicePrincipalName in CN=foo,OU=bar,DC=baz - (null): Operations error
> Failed to commit objects: WERR_GEN_FAILURE
This suggests an issue creating an index for servicePrincipalName on
that record, which is odd.  Is there anything unusual about that
record?

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba