On 29/07/2019 13:15, Marcio Demetrio Bacci via samba wrote:> Hi, > > Please, Would anyone help me? >Your post was about problems between a Samba DC and a Windows DC, but you seem to have two Windows DCs, does replication between these work correctly ? Did you join the Samba DC to the Windows DC, or the other way around ? Have you run 'samba-tool dbcheck' on the Samba DC ? Rowland
Marcio Demetrio Bacci
2019-Jul-29 13:48 UTC
[Samba] Problems with replication in the Samba 4
Hi,>Your post was about problems between a Samba DC and a Windows DC, but youseem to have two Windows DCs, does replication between these work correctly ? Yes, work properly between Windows Servers.>Did you join the Samba DC to the Windows DC, or the other way around ?I have jointed a Samba 4 at Domain (there are two Windows Server 2008) without problems, as follow: samba-tool domain join empresa.com.br DC -k yes>Have you run 'samba-tool dbcheck' on the Samba DC ?Yes, but didn't solve. samba-tool dbcheck Checking 2078 objects ERROR: missing GUID component for ipsecOwnersReference in object CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=empresa,DC=com,DC=br - CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br unable to find object for DN CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br - (No such Base DN: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br) Not removing dangling forward link Please use --fix to fix these errors Checked 2078 objects (1 errors) samba-tool dbcheck --fix --yes Checking 2078 objects ERROR: missing GUID component for ipsecOwnersReference in object CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=empresa,DC=com,DC=br - CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br unable to find object for DN CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br - (No such Base DN: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br) Not removing dangling forward link Checked 2078 objects (1 errors) Regards, M?rcio Bacci Em seg, 29 de jul de 2019 ?s 09:52, Rowland penny via samba < samba at lists.samba.org> escreveu:> On 29/07/2019 13:15, Marcio Demetrio Bacci via samba wrote: > > Hi, > > > > Please, Would anyone help me? > > > Your post was about problems between a Samba DC and a Windows DC, but > you seem to have two Windows DCs, does replication between these work > correctly ? > > Did you join the Samba DC to the Windows DC, or the other way around ? > > Have you run 'samba-tool dbcheck' on the Samba DC ? > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
On 29/07/2019 14:48, Marcio Demetrio Bacci wrote:> Yes, but didn't solve. > > samba-tool dbcheck > Checking 2078 objects > ERROR: missing GUID component for ipsecOwnersReference in object > CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP > Security,CN=System,DC=empresa,DC=com,DC=br - > CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP > Security,CN=System,CN=System,DC=empresa,DC=com,DC=br > unable to find object for DN > CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP > Security,CN=System,CN=System,DC=empresa,DC=com,DC=br - (No such Base > DN: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP > Security,CN=System,CN=System,DC=empresa,DC=com,DC=br) > Not removing dangling forward link > Please use --fix to fix these errors > Checked 2078 objects (1 errors) >I looked at that several times before I saw the problem, this is from my domain: CN=IP Security,CN=System,DC=samdom,DC=example,DC=com Can you see your problem now ? Just in case you cannot, you have: CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br Don't know how that happened and not sure how to fix it, only thing I can think of is to use ldbedit and wade through AD and remove one of the 'CN=System' from wherever there are two. But, as always, back everything up first. Rowland