samba - Jul 2019 - GPO issues - getting SYSVOL cleaned up again

Am 31.07.19 um 11:51 schrieb L.P.H. van Belle via samba:
> Run : nslookup dc
non-existent: good, afaik
> If this one removed, then its a hunt for the dc record in the AD and DNS. 
> Review with Windows tools, the Active Directory Sites and Services 
> If there is nothing left there. 
It's there in Sites - Default-First-Site-Name - Servers ...
>> sorry for going loops here, I thought I was rid of that for 
>> months already.
> 
> No problem, your almost there. Ones its all ok, then you can relax again. 
;-)
looking forward!

Am 31.07.19 um 11:59 schrieb Stefan G. Weichinger via
samba:
> Am 31.07.19 um 11:51 schrieb L.P.H. van Belle via samba:
> 
>> Run : nslookup dc
> 
> non-existent: good, afaik
> 
>> If this one removed, then its a hunt for the dc record in the AD and
DNS.
>> Review with Windows tools, the Active Directory Sites and Services 
>> If there is nothing left there. 
> 
> It's there in Sites - Default-First-Site-Name - Servers ...
There is a button "Rename" ... ?

Verify if the Alias GUID you now see are pointing to the correct DC's 
Then, klik on the GUID, properties, and where you see Server: SERVERNAME , there
you can choose "change".

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: woensdag 31 juli 2019 12:08
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] GPO issues - getting SYSVOL cleaned up again
> 
> Am 31.07.19 um 11:59 schrieb Stefan G. Weichinger via samba:
> > Am 31.07.19 um 11:51 schrieb L.P.H. van Belle via samba:
> > 
> >> Run : nslookup dc
> > 
> > non-existent: good, afaik
> > 
> >> If this one removed, then its a hunt for the dc record in 
> the AD and DNS. 
> >> Review with Windows tools, the Active Directory Sites and Services
> >> If there is nothing left there. 
> > 
> > It's there in Sites - Default-First-Site-Name - Servers ...
> 
> There is a button "Rename" ... ?
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Am 31.07.19 um 12:14 schrieb L.P.H. van Belle via samba:
> Verify if the Alias GUID you now see are pointing to the correct DC's 
The WHAT? ;-)

how and where to check please

You mean this? ->


# ldbsearch -H /var/lib/samba/private/sam.ldb '(invocationId=*)'
--cross-ncs objectguid
# record 1
dn: CN=NTDS
Settings,CN=PRE01SVDEB03,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=at
objectGUID: a60fbb5f-926b-484d-992c-c1ef5cc0936d

# record 2
dn: CN=NTDS
Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=at
objectGUID: e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4

that's a no then

> Then, klik on the GUID, properties, and where you see Server: SERVERNAME ,
there you can choose "change".
so I wait here?

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: woensdag 31 juli 2019 12:20
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] GPO issues - getting SYSVOL cleaned up again
> 
> Am 31.07.19 um 12:14 schrieb L.P.H. van Belle via samba:
> > Verify if the Alias GUID you now see are pointing to the 
> correct DC's 
> 
> The WHAT? ;-) 
GUID (objectGUID) 
A GUID (global unique identifier) is a term used by Microsoft for a number 
that its programming generates to create a unique identity for an entity 
such as a Word document. GUIDs are widely used in Microsoft products
to identify interfaces, replica sets, records, and other objects.
;-) 
> 
> how and where to check please
> 
> You mean this? ->
> 
> 
> # ldbsearch -H /var/lib/samba/private/sam.ldb '(invocationId=*)'
> --cross-ncs objectguid
> # record 1
> dn: CN=NTDS
> Settings,CN=PRE01SVDEB03,CN=Servers,CN=Default-First-Site-Name
> ,CN=Sites,CN=Configuration,DC=mydomain,DC=at
> objectGUID: a60fbb5f-926b-484d-992c-c1ef5cc0936d
> 
> # record 2
> dn: CN=NTDS
> Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,
> CN=Configuration,DC=mydomain,DC=at
> objectGUID: e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4
> 
> that's a no then
Ah, so this is what needs to be fixed. 
> 
> 
> > Then, klik on the GUID, properties, and where you see 
> Server: SERVERNAME , there you can choose "change". 
> 
> so I wait here?
No, here you select the correct DC name. 


> > Try : rgrep "dc.domain.at" /etc/*  
> nowhere on both DCs
Ok, so thats good. 

Ok, i've seen where this all is coming from. 

@Rowland, 
Can we manual update this file: 
/var/lib/samba/private/dns_update_cache  

This one contains the old names and objectGUID