samba - Dec 2018 - AD error 8418: The replication operation failed because of a schema mismatch between the servers involved (WERR_DS_DRA_SCHEMA_MISMATCH)

On 2018-10-18 09:42, Andrew Bartlett via samba wrote:
> On Thu, 2018-10-18 at 09:07 +0200, Noël Köthe via samba wrote:
>> Hello,
>>
>> we are running a 2008 R2 AD (schema 47) with two DCs:
>> * dc-win (Windows 2008 R2)
>> * dc-samba (samba 4.5.12, Debian stable)
>>
>> Since some weeks replication works only from dc-win to dc-samba but not
>> in the other direction.:(
> I've seen this before.
>
>> Any hint how to solve this?
>>
>> Thanks alot for your work.
> Start with a current Samba.  Schema replication, while not perfect, is
> improved. 
>
> Andrew Bartlett
>
hi
i had this problem to, in my case the the characters in the LDAP paths
was not in capital.

like:
linux: dnwindows: DN
there is no fix as i know, the solution would be remove the linux DC(s)
and rejoin them to the Windows DC.

Matthias 
  

Hello Matthias,

Am Donnerstag, den 18.10.2018, 11:15 +0200 schrieb Matthias Gassner via
samba:
> > > we are running a 2008 R2 AD (schema 47) with two DCs:
> > > * dc-win (Windows 2008 R2)
> > > * dc-samba (samba 4.5.12, Debian stable)
...
> i had this problem to, in my case the the characters in the LDAP paths
> was not in capital.
> 
> like:
> linux: dn> windows: DN> 
> there is no fix as i know, the solution would be remove the linux DC(s)
> and rejoin them to the Windows DC.
I checked and on Linux the file e.g. below samba/private/sam.ldb.d/ are
uppercase like CN=CONFIGURATION.. or DC=credativ...

but Thanks anyway.

Regards

	Noël
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.samba.org/pipermail/samba/attachments/20181210/5ba0d945/signature.sig>

On Mon, 10 Dec 2018 12:57:35 +0100
Noël Köthe via samba <samba at lists.samba.org> wrote:
> Hello Matthias,
> 
> Am Donnerstag, den 18.10.2018, 11:15 +0200 schrieb Matthias Gassner
> via samba:
> 
> > > > we are running a 2008 R2 AD (schema 47) with two DCs:
> > > > * dc-win (Windows 2008 R2)
> > > > * dc-samba (samba 4.5.12, Debian stable)
> ...
> > i had this problem to, in my case the the characters in the LDAP
> > paths was not in capital.
> > 
> > like:
> > linux: dn> > windows: DN> > 
> > there is no fix as i know, the solution would be remove the linux
> > DC(s) and rejoin them to the Windows DC.
> 
> I checked and on Linux the file e.g. below samba/private/sam.ldb.d/
> are uppercase like CN=CONFIGURATION.. or DC=credativ...
> 
> but Thanks anyway.
> 
> Regards
> 
> 	Noël
I don't think that is what was meant ;-)
I think what was meant was that some attributes in AD are in uppercase
on one DC and lowercase on another, this is a known problem and normally
doesn't give any problems. You shouldn't touch the files under
'sam.ldb.d', you should only use 'sam.ldb'

Andrew gave you the best advice (which you seem to have ignored, what
with it being 2 months since you last posted), add a new DC with a
current supported version of Samba (4.9.3 is available here:
http://apt.van-belle.nl/ ), then demote the old DC, see if this fixes
your problem.

Rowland