thr3ads.net - samba - [Samba] DsReplicaGetInfo() failed with status 8453 [Aug 2019]

If this information is useful, please help other people find it:
Share via:

Marcio Demetrio Bacci

2019-Aug-04 12:53 UTC

[Samba] DsReplicaGetInfo() failed with status 8453

Hi,

I have started getting the following error message when I run the repadmin
showreps command on the Windows Server 2008 server that is my primary DC:

DsReplicaGetInfo() failed with status 8453 (0x2105):
    Replication access has been denied.
DsReplicaGetInfo() failed with status 8453 (0x2105):
   Replication access has been denied.


My scenario has a Windows Server 2008 as the primary DC and a Samba 4
Server installed on Debian 9.9 as a secondary server.

Following is the complete result of the repadmin command:

C:\Users\administrator>repadmin /showreps
Default-First-Site-Name\WIN-DC1
DC Options: IS_GC
Site Options: (none)
DC object GUID: d580939f-a8b9-43ea-84e9-be0f9bd29468
DC invocationID: 71c305c7-564f-44dc-bdc7-c03ee501bd52

==== INBOUND NEIGHBORS =====================================
DC=empresa,DC=com,DC=br
    Default-First-Site-Name\SAMBA4-DC via RPC
        DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
        Last attempt @ 2019-08-04 08:52:07 was successful.

CN=Configuration,DC=empresa,DC=com,DC=br
    Default-First-Site-Name\SAMBA4-DC via RPC
        DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
        Last attempt @ 2019-08-04 08:52:07 was successful.

CN=Schema,CN=Configuration,DC=empresa,DC=com,DC=br
    Default-First-Site-Name\SAMBA4-DC via RPC
        DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
        Last attempt @ 2019-08-04 08:52:07 was successful.

DC=DomainDnsZones,DC=empresa,DC=com,DC=br
    Default-First-Site-Name\SAMBA4-DC via RPC
        DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
        Last attempt @ 2019-08-04 08:52:07 was successful.

DC=ForestDnsZones,DC=empresa,DC=com,DC=br
    Default-First-Site-Name\SAMBA4-DC via RPC
        DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
        Last attempt @ 2019-08-04 08:52:07 was successful.
DsReplicaGetInfo() failed with status 8453 (0x2105):
    Replication access has been denied.
DsReplicaGetInfo() failed with status 8453 (0x2105):
    Replication access has been denied.


I notice that recurrently differences arise between the bases of my
servers, as follows:

 ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator
Password for [EMPRESA\Administrator]:

* Comparing [DOMAIN] context...

* Objects to be compared: 1788

* Result for [DOMAIN]: SUCCESS

* Comparing [CONFIGURATION] context...

* Objects to be compared: 1640

* Result for [CONFIGURATION]: SUCCESS

* Comparing [SCHEMA] context...

* Objects to be compared: 1518

* Result for [SCHEMA]: SUCCESS

* Comparing [DNSDOMAIN] context...

* Objects to be compared: 540

Comparing:
'DC=CMC03,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
[ldap://WIN-DC1]
'DC= CMC03 
,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
[ldap://SAMBA4-DC]
    Difference in attribute values:
        dnsRecord =>
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd2\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd0\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
    FAILED

* Result for [DNSDOMAIN]: FAILURE

SUMMARY
---------

Attributes with different values:

    dnsRecord

* Comparing [DNSFOREST] context...

* Objects to be compared: 35

* Result for [DNSFOREST]: SUCCESS
ERROR: Compare failed: -1

I had already fixed the above error before.

How can I solve this problem?

Marcio Demetrio Bacci

2019-Aug-04 16:00 UTC

head link

[Samba] DsReplicaGetInfo() failed with status 8453

Hi,

This problem was solved.

In the Windows prompt, I wasn't run as Administrator.

About " ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator"

Only there is a delay between Windows and Samba 4 DC.

Regards,

M?rcio Bacci.



Em dom, 4 de ago de 2019 ?s 09:53, Marcio Demetrio Bacci <
marciobacci at gmail.com> escreveu:
> Hi,
>
> I have started getting the following error message when I run the repadmin
> showreps command on the Windows Server 2008 server that is my primary DC:
>
> DsReplicaGetInfo() failed with status 8453 (0x2105):
>     Replication access has been denied.
> DsReplicaGetInfo() failed with status 8453 (0x2105):
>    Replication access has been denied.
>
>
> My scenario has a Windows Server 2008 as the primary DC and a Samba 4
> Server installed on Debian 9.9 as a secondary server.
>
> Following is the complete result of the repadmin command:
>
> C:\Users\administrator>repadmin /showreps
> Default-First-Site-Name\WIN-DC1
> DC Options: IS_GC
> Site Options: (none)
> DC object GUID: d580939f-a8b9-43ea-84e9-be0f9bd29468
> DC invocationID: 71c305c7-564f-44dc-bdc7-c03ee501bd52
>
> ==== INBOUND NEIGHBORS =====================================>
> DC=empresa,DC=com,DC=br
>     Default-First-Site-Name\SAMBA4-DC via RPC
>         DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
>         Last attempt @ 2019-08-04 08:52:07 was successful.
>
> CN=Configuration,DC=empresa,DC=com,DC=br
>     Default-First-Site-Name\SAMBA4-DC via RPC
>         DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
>         Last attempt @ 2019-08-04 08:52:07 was successful.
>
> CN=Schema,CN=Configuration,DC=empresa,DC=com,DC=br
>     Default-First-Site-Name\SAMBA4-DC via RPC
>         DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
>         Last attempt @ 2019-08-04 08:52:07 was successful.
>
> DC=DomainDnsZones,DC=empresa,DC=com,DC=br
>     Default-First-Site-Name\SAMBA4-DC via RPC
>         DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
>         Last attempt @ 2019-08-04 08:52:07 was successful.
>
> DC=ForestDnsZones,DC=empresa,DC=com,DC=br
>     Default-First-Site-Name\SAMBA4-DC via RPC
>         DC object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a
>         Last attempt @ 2019-08-04 08:52:07 was successful.
> DsReplicaGetInfo() failed with status 8453 (0x2105):
>     Replication access has been denied.
> DsReplicaGetInfo() failed with status 8453 (0x2105):
>     Replication access has been denied.
>
>
> I notice that recurrently differences arise between the bases of my
> servers, as follows:
>
>  ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator
> Password for [EMPRESA\Administrator]:
>
> * Comparing [DOMAIN] context...
>
> * Objects to be compared: 1788
>
> * Result for [DOMAIN]: SUCCESS
>
> * Comparing [CONFIGURATION] context...
>
> * Objects to be compared: 1640
>
> * Result for [CONFIGURATION]: SUCCESS
>
> * Comparing [SCHEMA] context...
>
> * Objects to be compared: 1518
>
> * Result for [SCHEMA]: SUCCESS
>
> * Comparing [DNSDOMAIN] context...
>
> * Objects to be compared: 540
>
> Comparing:
>
'DC=CMC03,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
> [ldap://WIN-DC1]
> 'DC= CMC03 
,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
> [ldap://SAMBA4-DC]
>     Difference in attribute values:
>         dnsRecord =>
>
>
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd2\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
>
>
['\x04\x00\x01\x00\x05\xf0\x00\x00\xd0\xeeXx\x00\x00\x00<\x00\x00\x00\x00\x1c\xfd7\x00\xac\x15\xa0\x01']
>     FAILED
>
> * Result for [DNSDOMAIN]: FAILURE
>
> SUMMARY
> ---------
>
> Attributes with different values:
>
>     dnsRecord
>
> * Comparing [DNSFOREST] context...
>
> * Objects to be compared: 35
>
> * Result for [DNSFOREST]: SUCCESS
> ERROR: Compare failed: -1
>
> I had already fixed the above error before.
>
> How can I solve this problem?
>

Seemingly Similar Threads

Search for more seemingly similar threads

samba - Aug 2019 - DsReplicaGetInfo() failed with status 8453

[Samba] DsReplicaGetInfo() failed with status 8453

[Samba] DsReplicaGetInfo() failed with status 8453

Seemingly Similar Threads