Hi Andrew, thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. Regards, Alexander On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote:> Hello, > > we could need some help resolving a replication issue we experience since one week. >> Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returnsDo that again with --local and we should get a better set of info in the logs. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: debug.txt URL: <http://lists.samba.org/pipermail/samba/attachments/20200207/0dba7e1c/debug.txt>
G'Day Alexander, It looks like you have copied the logs out of a terminal and lost the ends of the lines. Those have the critical (groan...) details of what went wrong with the apparent 'critical extension' failure. Can you try and get those and I'll look at them tomorrow. Thanks! Andrew Bartlett On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote:> Hi Andrew, > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > Regards, Alexander > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > Hello, > > > > we could need some help resolving a replication issue we experience since one week. > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > Do that again with --local and we should get a better set of info in > the logs. > > Andrew Bartlett > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > >-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
I did but these are the last lines. It ends with ?raise e? also in the shell. I also ran it on the other DCs and they all end with ?raise e?. Alexander On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: G'Day Alexander, It looks like you have copied the logs out of a terminal and lost the ends of the lines. Those have the critical (groan...) details of what went wrong with the apparent 'critical extension' failure. Can you try and get those and I'll look at them tomorrow. Thanks! Andrew Bartlett On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote:> Hi Andrew, > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > Regards, Alexander > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > Hello, > > > > we could need some help resolving a replication issue we experience since one week. > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > Do that again with --local and we should get a better set of info in > the logs. > > Andrew Bartlett > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > >-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Is this better? On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: I mean the final columns, not lines. There are long lines that seem to be cut off mid-word, rather than wrapped. Andrew Bartlett On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote:> I did but these are the last lines. It ends with ?raise e? also in the shell. > > I also ran it on the other DCs and they all end with ?raise e?. > > Alexander > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > G'Day Alexander, > > It looks like you have copied the logs out of a terminal and lost the > ends of the lines. Those have the critical (groan...) details of what > went wrong with the apparent 'critical extension' failure. > > Can you try and get those and I'll look at them tomorrow. > > Thanks! > > Andrew Bartlett > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > Hi Andrew, > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > Regards, Alexander > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > Hello, > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > Do that again with --local and we should get a better set of info in > > the logs. > > > > Andrew Bartlett > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > >-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: debug.txt URL: <http://lists.samba.org/pipermail/samba/attachments/20200207/60476962/debug.txt>
Much better. What Samba version is this? Andrew Bartlett On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote:> Is this better? > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > I mean the final columns, not lines. There are long lines that seem to > be cut off mid-word, rather than wrapped. > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > Alexander > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > G'Day Alexander, > > > > It looks like you have copied the logs out of a terminal and lost the > > ends of the lines. Those have the critical (groan...) details of what > > went wrong with the apparent 'critical extension' failure. > > > > Can you try and get those and I'll look at them tomorrow. > > > > Thanks! > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > Hi Andrew, > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > Regards, Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > Hello, > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > Do that again with --local and we should get a better set of info in > > > the logs. > > > > > > Andrew Bartlett > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Version 4.9.5-Debian On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: Much better. What Samba version is this? Andrew Bartlett On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote:> Is this better? > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > I mean the final columns, not lines. There are long lines that seem to > be cut off mid-word, rather than wrapped. > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > Alexander > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > G'Day Alexander, > > > > It looks like you have copied the logs out of a terminal and lost the > > ends of the lines. Those have the critical (groan...) details of what > > went wrong with the apparent 'critical extension' failure. > > > > Can you try and get those and I'll look at them tomorrow. > > > > Thanks! > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > Hi Andrew, > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > Regards, Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > Hello, > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > Do that again with --local and we should get a better set of info in > > > the logs. > > > > > > Andrew Bartlett > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
I would fix that first, please run Samba 4.11. We have done much on replication since then and I'm keen to rule out things we have already fixed before digging into this further. Thanks! Andrew Bartlett On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote:> Version 4.9.5-Debian > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > Much better. What Samba version is this? > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > Is this better? > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > I mean the final columns, not lines. There are long lines that seem to > > be cut off mid-word, rather than wrapped. > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > G'Day Alexander, > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > ends of the lines. Those have the critical (groan...) details of what > > > went wrong with the apparent 'critical extension' failure. > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > Thanks! > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > Hi Andrew, > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > Hello, > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > Do that again with --local and we should get a better set of info in > > > > the logs. > > > > > > > > Andrew Bartlett > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Hi, as instructed I upgraded to ?Version 4.11.6-Debian?. Attached the new debug file. Regards, Alexander On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: I would fix that first, please run Samba 4.11. We have done much on replication since then and I'm keen to rule out things we have already fixed before digging into this further. Thanks! Andrew Bartlett On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote:> Version 4.9.5-Debian > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > Much better. What Samba version is this? > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > Is this better? > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > I mean the final columns, not lines. There are long lines that seem to > > be cut off mid-word, rather than wrapped. > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > G'Day Alexander, > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > ends of the lines. Those have the critical (groan...) details of what > > > went wrong with the apparent 'critical extension' failure. > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > Thanks! > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > Hi Andrew, > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > Hello, > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > Do that again with --local and we should get a better set of info in > > > > the logs. > > > > > > > > Andrew Bartlett > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: debug.txt URL: <http://lists.samba.org/pipermail/samba/attachments/20200207/18b940bd/debug.txt>
Just guessing: could this be related to the activated ?AD recycle bin? feature? could this be related to activated Microsoft Azure Active Directory Connect? The object causing the problem is in the ?Deleted Objects? folder of the AD. It is put there by the recycle bin feature. However, I guess that even if I manage to somehow delete it from there on the master AD, the object will never really be gone because due to the replication it will be kept until replicated or not? If the recycle bin is the culprit, how could one fix this? Remove all Samba ADs, fix the Windows AD (how?) and rejoin Samba ADs? Regards, Alexander On 7. February 2020 at 23:34:13, Alexander Harm (alexander.harm at apfel-q.de) wrote: Hi, as instructed I upgraded to ?Version 4.11.6-Debian?. Attached the new debug file. Regards, Alexander On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: I would fix that first, please run Samba 4.11. We have done much on replication since then and I'm keen to rule out things we have already fixed before digging into this further. Thanks! Andrew Bartlett On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote:> Version 4.9.5-Debian > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > Much better. What Samba version is this? > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > Is this better? > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > I mean the final columns, not lines. There are long lines that seem to > > be cut off mid-word, rather than wrapped. > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > G'Day Alexander, > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > ends of the lines. Those have the critical (groan...) details of what > > > went wrong with the apparent 'critical extension' failure. > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > Thanks! > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > Hi Andrew, > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > Hello, > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > Do that again with --local and we should get a better set of info in > > > > the logs. > > > > > > > > Andrew Bartlett > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Thanks. At this stage is looks like a bug in the repl_meta_data module. Try the attached patch. Can I name you in the bug and is there any affiliation (eg employer) you would like named? I've filed a bug and will file a merge request once I have a test to confirm this. https://bugzilla.samba.org/show_bug.cgi?id=14272 Thanks! Andrew Bartlett On Fri, 2020-02-07 at 23:34 +0100, Alexander Harm via samba wrote:> Hi, > > as instructed I upgraded to ?Version 4.11.6-Debian?. > > Attached the new debug file. > > Regards, Alexander > > > > > On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > I would fix that first, please run Samba 4.11. > > We have done much on replication since then and I'm keen to rule out > things we have already fixed before digging into this further. > > Thanks! > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote: > > Version 4.9.5-Debian > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > Much better. What Samba version is this? > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > > Is this better? > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > I mean the final columns, not lines. There are long lines that seem to > > > be cut off mid-word, rather than wrapped. > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > > > G'Day Alexander, > > > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > > ends of the lines. Those have the critical (groan...) details of what > > > > went wrong with the apparent 'critical extension' failure. > > > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > > > Thanks! > > > > > > > > Andrew Bartlett > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > > Hi Andrew, > > > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > > Hello, > > > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > > > Do that again with --local and we should get a better set of info in > > > > > the logs. > > > > > > > > > > Andrew Bartlett > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-dsdb-Do-not-make-DSDB_CONTROL_REPLMD_VANISH_LINKS-cr.patch Type: text/x-patch Size: 1201 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20200208/8f33acc5/0001-dsdb-Do-not-make-DSDB_CONTROL_REPLMD_VANISH_LINKS-cr.bin>
Hi Andrew, you can use my name if you want (Alexander Harm). I will try and build with your patch. Alexander On 8. February 2020 at 00:30:02, Andrew Bartlett (abartlet at samba.org) wrote: Thanks. At this stage is looks like a bug in the repl_meta_data module. Try the attached patch. Can I name you in the bug and is there any affiliation (eg employer) you would like named? I've filed a bug and will file a merge request once I have a test to confirm this. https://bugzilla.samba.org/show_bug.cgi?id=14272 Thanks! Andrew Bartlett On Fri, 2020-02-07 at 23:34 +0100, Alexander Harm via samba wrote:> Hi, > > as instructed I upgraded to ?Version 4.11.6-Debian?. > > Attached the new debug file. > > Regards, Alexander > > > > > On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > I would fix that first, please run Samba 4.11. > > We have done much on replication since then and I'm keen to rule out > things we have already fixed before digging into this further. > > Thanks! > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote: > > Version 4.9.5-Debian > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > Much better. What Samba version is this? > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > > Is this better? > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > I mean the final columns, not lines. There are long lines that seem to > > > be cut off mid-word, rather than wrapped. > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > > > G'Day Alexander, > > > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > > ends of the lines. Those have the critical (groan...) details of what > > > > went wrong with the apparent 'critical extension' failure. > > > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > > > Thanks! > > > > > > > > Andrew Bartlett > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > > Hi Andrew, > > > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > > Hello, > > > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > > > Do that again with --local and we should get a better set of info in > > > > > the logs. > > > > > > > > > > Andrew Bartlett > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Hi Andrew, I applied your patch to the Debian packages of Louis. Do you happen to know in which package it will end up? Tried samba and samba-dsdb-modules but the error remains the same. Alexander On 8. February 2020 at 01:38:25, Alexander Harm (alexander.harm at apfel-q.de) wrote: Hi Andrew, you can use my name if you want (Alexander Harm). I will try and build with your patch. Alexander On 8. February 2020 at 00:30:02, Andrew Bartlett (abartlet at samba.org) wrote: Thanks. At this stage is looks like a bug in the repl_meta_data module. Try the attached patch. Can I name you in the bug and is there any affiliation (eg employer) you would like named? I've filed a bug and will file a merge request once I have a test to confirm this. https://bugzilla.samba.org/show_bug.cgi?id=14272 Thanks! Andrew Bartlett On Fri, 2020-02-07 at 23:34 +0100, Alexander Harm via samba wrote:> Hi, > > as instructed I upgraded to ?Version 4.11.6-Debian?. > > Attached the new debug file. > > Regards, Alexander > > > > > On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > I would fix that first, please run Samba 4.11. > > We have done much on replication since then and I'm keen to rule out > things we have already fixed before digging into this further. > > Thanks! > > Andrew Bartlett > > On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote: > > Version 4.9.5-Debian > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > Much better. What Samba version is this? > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote: > > > Is this better? > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > I mean the final columns, not lines. There are long lines that seem to > > > be cut off mid-word, rather than wrapped. > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote: > > > > I did but these are the last lines. It ends with ?raise e? also in the shell. > > > > > > > > I also ran it on the other DCs and they all end with ?raise e?. > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote: > > > > > > > > G'Day Alexander, > > > > > > > > It looks like you have copied the logs out of a terminal and lost the > > > > ends of the lines. Those have the critical (groan...) details of what > > > > went wrong with the apparent 'critical extension' failure. > > > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > > > Thanks! > > > > > > > > Andrew Bartlett > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote: > > > > > Hi Andrew, > > > > > > > > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me. > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote: > > > > > > Hello, > > > > > > > > > > > > we could need some help resolving a replication issue we experience since one week. > > > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > > > Do that again with --local and we should get a better set of info in > > > > > the logs. > > > > > > > > > > Andrew Bartlett > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Hi Andrew, thanks for your feedback. What are my options now? Nuke the whole thing? Alexander On 24. February 2020 at 02:08:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: G'Day Alexander, This is looking trickier than I had hoped. I don't think the patch I included is the right approach, and I can't reproduce what I thought was the issue on master. I've added a test in MR https://gitlab.com/samba-team/samba/-/merge_requests/1128 but that just shows that what we were doing still works, so it isn't terribly useful in your case. I'm sorry that I don't have a really good next step, something DB- specific appears to be going on, particularly as you then get another error once we fix this one. Sorry! Andrew Bartlett On Sat, 2020-02-08 at 12:29 +1300, Andrew Bartlett via samba wrote:> Thanks. At this stage is looks like a bug in the repl_meta_data > module. > > Try the attached patch. > > Can I name you in the bug and is there any affiliation (eg employer) > you would like named? > > I've filed a bug and will file a merge request once I have a test to > confirm this. > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > Thanks! > > Andrew Bartlett > > On Fri, 2020-02-07 at 23:34 +0100, Alexander Harm via samba wrote: > > Hi, > > > > as instructed I upgraded to ?Version 4.11.6-Debian?. > > > > Attached the new debug file. > > > > Regards, Alexander > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew Bartlett via samba ( > > samba at lists.samba.org) wrote: > > > > I would fix that first, please run Samba 4.11. > > > > We have done much on replication since then and I'm keen to rule > > out > > things we have already fixed before digging into this further. > > > > Thanks! > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba > > wrote: > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba ( > > > samba at lists.samba.org) wrote: > > > > > > Much better. What Samba version is this? > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba > > > wrote: > > > > Is this better? > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba ( > > > > samba at lists.samba.org) wrote: > > > > > > > > I mean the final columns, not lines. There are long lines that > > > > seem to > > > > be cut off mid-word, rather than wrapped. > > > > > > > > Andrew Bartlett > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba > > > > wrote: > > > > > I did but these are the last lines. It ends with ?raise e? > > > > > also in the shell. > > > > > > > > > > I also ran it on the other DCs and they all end with ?raise > > > > > e?. > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett ( > > > > > abartlet at samba.org) wrote: > > > > > > > > > > G'Day Alexander, > > > > > > > > > > It looks like you have copied the logs out of a terminal and > > > > > lost the > > > > > ends of the lines. Those have the critical (groan...) details > > > > > of what > > > > > went wrong with the apparent 'critical extension' failure. > > > > > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > > > > > Thanks! > > > > > > > > > > Andrew Bartlett > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba > > > > > wrote: > > > > > > Hi Andrew, > > > > > > > > > > > > thanks for your reply. Find attached the output of the > > > > > > command. Looks like it fails on renaming an object to me. > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba > > > > > > wrote: > > > > > > > Hello, > > > > > > > > > > > > > > we could need some help resolving a replication issue we > > > > > > > experience since one week. > > > > > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 > > > > > > > dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > > > > > > > > > > > Do that again with --local and we should get a better set > > > > > > of info in > > > > > > the logs. > > > > > > > > > > > > Andrew Bartlett > > > > > > -- > > > > > > Andrew Bartlett http://samba.org/~abartlet/? > > > > > > Authentication Developer, Samba Team http://samba.org? > > > > > > Samba Developer, Catalyst IT > > > > > > http://catalyst.net.nz/services/samba? > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/? > > > > > Authentication Developer, Samba Team http://samba.org? > > > > > Samba Developer, Catalyst IT > > > > > http://catalyst.net.nz/services/samba? > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/? > > > > Authentication Developer, Samba Team http://samba.org? > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba? > > > > > > > > > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read > > > > the > > > > instructions: https://lists.samba.org/mailman/options/samba? > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/? > > > Authentication Developer, Samba Team http://samba.org? > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba? > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read > > > the > > > instructions: https://lists.samba.org/mailman/options/samba? > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/? > > Authentication Developer, Samba Team http://samba.org? > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba? > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read > > the > > instructions: https://lists.samba.org/mailman/options/samba?-- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT - Expert Open Source Solutions https://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
I'm pretty swamped with other community support issues, which is why it is taking so long to get back to you. It would at least be interesting to see the results after you apply this patch (on master, but might backport cleanly). If it works for you (in terms of giving useful information) I'll propose it for a future Samba version. Still not a fix for the actual issue, but it might tell us what is going on. Thanks, Andrew Bartlett On Mon, 2020-02-24 at 08:29 +0100, Alexander Harm via samba wrote:> Hi Andrew, > > thanks for your feedback. What are my options now? Nuke the whole thing? > > Alexander > > > > > On 24. February 2020 at 02:08:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: > > G'Day Alexander, > > This is looking trickier than I had hoped. I don't think the patch I > included is the right approach, and I can't reproduce what I thought > was the issue on master. > > I've added a test in MR > https://gitlab.com/samba-team/samba/-/merge_requests/1128 but that just > shows that what we were doing still works, so it isn't terribly useful > in your case. > > I'm sorry that I don't have a really good next step, something DB- > specific appears to be going on, particularly as you then get another > error once we fix this one. > > Sorry! > > Andrew Bartlett > > On Sat, 2020-02-08 at 12:29 +1300, Andrew Bartlett via samba wrote: > > Thanks. At this stage is looks like a bug in the repl_meta_data > > module. > > > > Try the attached patch. > > > > Can I name you in the bug and is there any affiliation (eg employer) > > you would like named? > > > > I've filed a bug and will file a merge request once I have a test to > > confirm this. > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > Thanks! > > > > Andrew Bartlett > > > > On Fri, 2020-02-07 at 23:34 +0100, Alexander Harm via samba wrote: > > > Hi, > > > > > > as instructed I upgraded to ?Version 4.11.6-Debian?. > > > > > > Attached the new debug file. > > > > > > Regards, Alexander > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew Bartlett via samba ( > > > samba at lists.samba.org) wrote: > > > > > > I would fix that first, please run Samba 4.11. > > > > > > We have done much on replication since then and I'm keen to rule > > > out > > > things we have already fixed before digging into this further. > > > > > > Thanks! > > > > > > Andrew Bartlett > > > > > > On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba > > > wrote: > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew Bartlett via samba ( > > > > samba at lists.samba.org) wrote: > > > > > > > > Much better. What Samba version is this? > > > > > > > > Andrew Bartlett > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba > > > > wrote: > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba ( > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > I mean the final columns, not lines. There are long lines that > > > > > seem to > > > > > be cut off mid-word, rather than wrapped. > > > > > > > > > > Andrew Bartlett > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba > > > > > wrote: > > > > > > I did but these are the last lines. It ends with ?raise e? > > > > > > also in the shell. > > > > > > > > > > > > I also ran it on the other DCs and they all end with ?raise > > > > > > e?. > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, Andrew Bartlett ( > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > It looks like you have copied the logs out of a terminal and > > > > > > lost the > > > > > > ends of the lines. Those have the critical (groan...) details > > > > > > of what > > > > > > went wrong with the apparent 'critical extension' failure. > > > > > > > > > > > > Can you try and get those and I'll look at them tomorrow. > > > > > > > > > > > > Thanks! > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba > > > > > > wrote: > > > > > > > Hi Andrew, > > > > > > > > > > > > > > thanks for your reply. Find attached the output of the > > > > > > > command. Looks like it fails on renaming an object to me. > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba > > > > > > > wrote: > > > > > > > > Hello, > > > > > > > > > > > > > > > > we could need some help resolving a replication issue we > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > dc=ds,dc=example,dc=com --sync-all -d 9 returns > > > > > > > > > > > > > > > > > > > > > Do that again with --local and we should get a better set > > > > > > > of info in > > > > > > > the logs. > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > -- > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > Samba Developer, Catalyst IT > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > Samba Developer, Catalyst IT > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > -- > > > > > To unsubscribe from this list go to the following URL and read > > > > > the > > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > -- > > > > To unsubscribe from this list go to the following URL and read > > > > the > > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read > > > the > > > instructions: https://lists.samba.org/mailman/options/samba > -- > Andrew Bartlett > https://samba.org/~abartlet/ > Authentication Developer, Samba Team https://samba.org > Samba Development and Support, Catalyst IT - Expert Open Source > Solutions > https://catalyst.net.nz/services/samba > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-dsdb-Add-very-verbose-debugging-if-a-delete-fails-in.patch Type: text/x-patch Size: 2501 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20200229/55542149/0001-dsdb-Add-very-verbose-debugging-if-a-delete-fails-in.bin>
That did the trick for manual replication via samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --sync-all --local -d 9 However, if I run samba-tool drs showrepl it shows me a result 1326 (WERR_LOGON_FAILURE) and also samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync fails with the same error. How can I fix this? On 3. March 2020 at 04:23:02, Andrew Bartlett (abartlet at samba.org) wrote: I think I have this finally fixed here: https://gitlab.com/samba-team/samba/-/merge_requests/1189 https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch Thanks for your patience, Andrew Bartlett On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote:> Hi Andrew, > > that is great news. Thanks so much for your support through this. > > Alexander > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > wrote: > > > You can just join a new DC and demote the failing one, or the > > reverse, > > demote the failing one and rejoin it. > > > > However I'm pretty close to a patch and have a test that > > reproduces > > this locally, so expect some good news soon. > > > > Andrew Bartlett > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > Question: is there a possibility to delete the current records of > > a dc and resync from the master? Like not applying the diff of a > > replication but just wipe the whole thing and replicate from > > scratch? > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > alexander.harm at apfel-q.de) wrote: > > > > > > > Hi Andrew, > > > > > > > > I guess there is a typo in your request. Find attached the > > output of the following queries: > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > 83e6-cfcfdae11bc4' --show-deleted > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > show-deleted > > > > Looks like DC01 cannot move the device from registered to > > deleted, no? > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > 4304-83e6- > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > eg > > > > > > > > > > ldbsearch -H sam.ldb -s base -b 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > cfcfdae11bc4,CN=Deleted > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > I'm trying to understand what msDS-KeyCredentialLink is set > > to before > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > Andrew Bartlett > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > Hi Andrew, > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > dc01: already existing Samba DC which showed the problems > > > > > > dc03: new Samba DC to see if problems could be worked > > around by setting up new DCs > > > > > > your patches are applied to both > > > > > > The chronological order as follows: > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > reason when trying to replicate from Windows AD > > > > > > debug_dc03_repfrom_winad.txt: I then tried to replicate the > > new DC > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > dc01 to work around the auth errors concerning the AD > > > > > > Does this help you further? Can you confirm that dc03 works > > in fact fine? > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > That, and another one (from my own attempts to reproduce > > by manually > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander Harm wrote: > > > > > > > > I am apparently too stupid to just download the > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > The new patch on it's own and with the earlier patch > > (to make it non- > > > > > > > > > critical) would be helpful. There are multiple errors > > here and we need > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > wrote: > > > > > > > > > > Sorry, was a bit confused myself. I will apply your > > patch and report the result. Just to confirm, we speak about > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew Bartlett > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community support > > issues, which is why it > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > results after you apply > > > > > > > > > > > this patch (on master, but might backport > > cleanly). > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > information) I'll > > > > > > > > > > > propose it for a future Samba version. Still not > > a fix for the actual > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, Alexander Harm > > via samba wrote: > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my options > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > don't think the patch I > > > > > > > > > > > > included is the right approach, and I can't > > reproduce what I thought > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 but that > > just > > > > > > > > > > > > shows that what we were doing still works, so > > it isn't terribly useful > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really good next > > step, something DB- > > > > > > > > > > > > specific appears to be going on, particularly > > as you then get another > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > Bartlett via samba wrote: > > > > > > > > > > > > > Thanks. At this stage is looks like a bug in > > the repl_meta_data > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > affiliation (eg employer) > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > request once I have a test to > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, Alexander > > Harm via samba wrote: > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication since then > > and I'm keen to rule > > > > > > > > > > > > > > out > > > > > > > > > > > > > > things we have already fixed before digging > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > There are long lines that > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > I did but these are the last lines. > > It ends with ?raise e? > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > they all end with ?raise > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > logs out of a terminal and > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > critical (groan...) details > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > went wrong with the apparent > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > attached the output of the > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help resolving > > a replication issue we > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs replicate > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com --sync- > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with --local and we > > should get a better set > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > Team http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > the > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > -- > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > Authentication Developer, Samba Team > > https://samba.org > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > Expert Open Source > > > > > > > > > > > > Solutions > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read the > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > -- > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > To unsubscribe from this list go to the following > > URL and read the > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > -- > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > >-- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT - Expert Open Source Solutions https://catalyst.net.nz/services/samba
OK, found this post from Louis and this fixed it for me. https://lists.samba.org/archive/samba/2019-April/222278.html @Andrew: thanks so much for your time, effort and support the last days! Alexander On 3. March 2020 at 10:01:59, Alexander Harm (alexander.harm at apfel-q.de) wrote: That did the trick for manual replication via samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --sync-all --local -d 9 However, if I run samba-tool drs showrepl it shows me a result 1326 (WERR_LOGON_FAILURE) and also samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync fails with the same error. How can I fix this? On 3. March 2020 at 04:23:02, Andrew Bartlett (abartlet at samba.org) wrote: I think I have this finally fixed here: https://gitlab.com/samba-team/samba/-/merge_requests/1189 https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch Thanks for your patience, Andrew Bartlett On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote:> Hi Andrew, > > that is great news. Thanks so much for your support through this. > > Alexander > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > wrote: > > > You can just join a new DC and demote the failing one, or the > > reverse, > > demote the failing one and rejoin it. > > > > However I'm pretty close to a patch and have a test that > > reproduces > > this locally, so expect some good news soon. > > > > Andrew Bartlett > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > Question: is there a possibility to delete the current records of > > a dc and resync from the master? Like not applying the diff of a > > replication but just wipe the whole thing and replicate from > > scratch? > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > alexander.harm at apfel-q.de) wrote: > > > > > > > Hi Andrew, > > > > > > > > I guess there is a typo in your request. Find attached the > > output of the following queries: > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > 83e6-cfcfdae11bc4' --show-deleted > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > show-deleted > > > > Looks like DC01 cannot move the device from registered to > > deleted, no? > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > 4304-83e6- > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > eg > > > > > > > > > > ldbsearch -H sam.ldb -s base -b 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > cfcfdae11bc4,CN=Deleted > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > I'm trying to understand what msDS-KeyCredentialLink is set > > to before > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > Andrew Bartlett > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > Hi Andrew, > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > dc01: already existing Samba DC which showed the problems > > > > > > dc03: new Samba DC to see if problems could be worked > > around by setting up new DCs > > > > > > your patches are applied to both > > > > > > The chronological order as follows: > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > reason when trying to replicate from Windows AD > > > > > > debug_dc03_repfrom_winad.txt: I then tried to replicate the > > new DC > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > dc01 to work around the auth errors concerning the AD > > > > > > Does this help you further? Can you confirm that dc03 works > > in fact fine? > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > That, and another one (from my own attempts to reproduce > > by manually > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander Harm wrote: > > > > > > > > I am apparently too stupid to just download the > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > The new patch on it's own and with the earlier patch > > (to make it non- > > > > > > > > > critical) would be helpful. There are multiple errors > > here and we need > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > wrote: > > > > > > > > > > Sorry, was a bit confused myself. I will apply your > > patch and report the result. Just to confirm, we speak about > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew Bartlett > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community support > > issues, which is why it > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > results after you apply > > > > > > > > > > > this patch (on master, but might backport > > cleanly). > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > information) I'll > > > > > > > > > > > propose it for a future Samba version. Still not > > a fix for the actual > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, Alexander Harm > > via samba wrote: > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my options > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > don't think the patch I > > > > > > > > > > > > included is the right approach, and I can't > > reproduce what I thought > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 but that > > just > > > > > > > > > > > > shows that what we were doing still works, so > > it isn't terribly useful > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really good next > > step, something DB- > > > > > > > > > > > > specific appears to be going on, particularly > > as you then get another > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > Bartlett via samba wrote: > > > > > > > > > > > > > Thanks. At this stage is looks like a bug in > > the repl_meta_data > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > affiliation (eg employer) > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > request once I have a test to > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, Alexander > > Harm via samba wrote: > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication since then > > and I'm keen to rule > > > > > > > > > > > > > > out > > > > > > > > > > > > > > things we have already fixed before digging > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > There are long lines that > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > I did but these are the last lines. > > It ends with ?raise e? > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > they all end with ?raise > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > logs out of a terminal and > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > critical (groan...) details > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > went wrong with the apparent > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > attached the output of the > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100, > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help resolving > > a replication issue we > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs replicate > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com --sync- > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with --local and we > > should get a better set > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > Team http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read > > > > > > > > > > > > > > the > > > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > -- > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > Authentication Developer, Samba Team > > https://samba.org > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > Expert Open Source > > > > > > > > > > > > Solutions > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > To unsubscribe from this list go to the > > following URL and read the > > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > -- > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > To unsubscribe from this list go to the following > > URL and read the > > > > > > > > > > > instructions: > > https://lists.samba.org/mailman/options/samba > > > > > > > > > -- > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > Authentication Developer, Samba Team http://samba.org > > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > -- > > Andrew Bartlett http://samba.org/~abartlet/ > > Authentication Developer, Samba Team http://samba.org > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba > > > >-- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT - Expert Open Source Solutions https://catalyst.net.nz/services/samba
Just to confirm this. Im guessing you use this part :> For the DsREplicatSync error, i would suggest these steps first. > DC2, change the resolv.conf, set DC1 first, then DC2, reboot. > Wait 5 min, now check replication again, if its ok, now you can change > the resolv.conf back.Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Alexander Harm via samba > Verzonden: dinsdag 3 maart 2020 10:35 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [PATCH] Re: Failing replication > > OK, found this post from Louis and this fixed it for me. > > https://lists.samba.org/archive/samba/2019-April/222278.html > > @Andrew: thanks so much for your time, effort and support the > last days! > > Alexander > > > > > On 3. March 2020 at 10:01:59, Alexander Harm > (alexander.harm at apfel-q.de) wrote: > > That did the trick for manual replication via > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com > --sync-all --local -d 9 > > However, if I run samba-tool drs showrepl it shows me a > > result 1326 (WERR_LOGON_FAILURE) > > and also > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > fails with the same error. > > How can I fix this? > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > (abartlet at samba.org) wrote: > > I think I have this finally fixed here: > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > Thanks for your patience, > > Andrew Bartlett > > On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote: > > Hi Andrew, > > > > that is great news. Thanks so much for your support through this. > > > > Alexander > > > > > > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > > wrote: > > > > > You can just join a new DC and demote the failing one, or the > > > reverse, > > > demote the failing one and rejoin it. > > > > > > However I'm pretty close to a patch and have a test that > > > reproduces > > > this locally, so expect some good news soon. > > > > > > Andrew Bartlett > > > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > > Question: is there a possibility to delete the current > records of > > > a dc and resync from the master? Like not applying the diff of a > > > replication but just wipe the whole thing and replicate from > > > scratch? > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > > alexander.harm at apfel-q.de) wrote: > > > > > > > > > Hi Andrew, > > > > > > > > > > I guess there is a typo in your request. Find attached the > > > output of the following queries: > > > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > 83e6-cfcfdae11bc4' --show-deleted > > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > > show-deleted > > > > > Looks like DC01 cannot move the device from registered to > > > deleted, no? > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > > 4304-83e6- > > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > > > eg > > > > > > > > > > > > ldbsearch -H sam.ldb -s base -b > 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > > cfcfdae11bc4,CN=Deleted > > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > > > I'm trying to understand what > msDS-KeyCredentialLink is set > > > to before > > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > > Hi Andrew, > > > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > > > dc01: already existing Samba DC which showed the > problems > > > > > > > dc03: new Samba DC to see if problems could be worked > > > around by setting up new DCs > > > > > > > your patches are applied to both > > > > > > > The chronological order as follows: > > > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > > reason when trying to replicate from Windows AD > > > > > > > debug_dc03_repfrom_winad.txt: I then tried to > replicate the > > > new DC > > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > > dc01 to work around the auth errors concerning the AD > > > > > > > Does this help you further? Can you confirm that > dc03 works > > > in fact fine? > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > > > That, and another one (from my own attempts to > reproduce > > > by manually > > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander > Harm wrote: > > > > > > > > > I am apparently too stupid to just download the > > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > The new patch on it's own and with the > earlier patch > > > (to make it non- > > > > > > > > > > critical) would be helpful. There are > multiple errors > > > here and we need > > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > > wrote: > > > > > > > > > > > Sorry, was a bit confused myself. I will > apply your > > > patch and report the result. Just to confirm, we speak about > > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew > Bartlett > > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community > support > > > issues, which is why it > > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > > results after you apply > > > > > > > > > > > > this patch (on master, but might backport > > > cleanly). > > > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > > information) I'll > > > > > > > > > > > > propose it for a future Samba version. > Still not > > > a fix for the actual > > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, > Alexander Harm > > > via samba wrote: > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my > options > > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > > don't think the patch I > > > > > > > > > > > > > included is the right approach, and I can't > > > reproduce what I thought > > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 > but that > > > just > > > > > > > > > > > > > shows that what we were doing still > works, so > > > it isn't terribly useful > > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really > good next > > > step, something DB- > > > > > > > > > > > > > specific appears to be going on, > particularly > > > as you then get another > > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > > Bartlett via samba wrote: > > > > > > > > > > > > > > Thanks. At this stage is looks like > a bug in > > > the repl_meta_data > > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > > affiliation (eg employer) > > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > > request once I have a test to > > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, > Alexander > > > Harm via samba wrote: > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication > since then > > > and I'm keen to rule > > > > > > > > > > > > > > > out > > > > > > > > > > > > > > > things we have already fixed > before digging > > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > 09:55:02, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version > is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > 09:42:01, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > > There are long lines that > > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > I did but these are the > last lines. > > > It ends with ?raise e? > > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > > they all end with ?raise > > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > > logs out of a terminal and > > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > > critical (groan...) details > > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > > went wrong with the apparent > > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > > attached the output of the > > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at > 23:41 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help > resolving > > > a replication issue we > > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs > replicate > > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com > --sync- > > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with > --local and we > > > should get a better set > > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > > Team http://samba.org > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, > Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > To unsubscribe from this list > go to the > > > following URL and read > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list > go to the > > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > Andrew Bartlett > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > following URL and read > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > -- > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > > Authentication Developer, Samba Team > > > https://samba.org > > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > > Expert Open Source > > > > > > > > > > > > > Solutions > > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > To unsubscribe from this list go to the > > > following URL and read the > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > -- > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > To unsubscribe from this list go to the > following > > > URL and read the > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > -- > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > Authentication Developer, Samba Team > http://samba.org > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > -- > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT > http://catalyst.net.nz/services/samba > > > > > > > -- > Andrew Bartlett > https://samba.org/~abartlet/ > Authentication Developer, Samba Team https://samba.org > Samba Development and Support, Catalyst IT - Expert Open Source > Solutions > https://catalyst.net.nz/services/samba > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Exactly! On 3. March 2020 at 11:07:02, L.P.H. van Belle via samba (samba at lists.samba.org) wrote: Just to confirm this. Im guessing you use this part :> For the DsREplicatSync error, i would suggest these steps first. > DC2, change the resolv.conf, set DC1 first, then DC2, reboot. > Wait 5 min, now check replication again, if its ok, now you can change > the resolv.conf back.Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Alexander Harm via samba > Verzonden: dinsdag 3 maart 2020 10:35 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [PATCH] Re: Failing replication > > OK, found this post from Louis and this fixed it for me. > > https://lists.samba.org/archive/samba/2019-April/222278.html > > @Andrew: thanks so much for your time, effort and support the > last days! > > Alexander > > > > > On 3. March 2020 at 10:01:59, Alexander Harm > (alexander.harm at apfel-q.de) wrote: > > That did the trick for manual replication via > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com > --sync-all --local -d 9 > > However, if I run samba-tool drs showrepl it shows me a > > result 1326 (WERR_LOGON_FAILURE) > > and also > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > fails with the same error. > > How can I fix this? > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > (abartlet at samba.org) wrote: > > I think I have this finally fixed here: > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > Thanks for your patience, > > Andrew Bartlett > > On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote: > > Hi Andrew, > > > > that is great news. Thanks so much for your support through this. > > > > Alexander > > > > > > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > > wrote: > > > > > You can just join a new DC and demote the failing one, or the > > > reverse, > > > demote the failing one and rejoin it. > > > > > > However I'm pretty close to a patch and have a test that > > > reproduces > > > this locally, so expect some good news soon. > > > > > > Andrew Bartlett > > > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > > Question: is there a possibility to delete the current > records of > > > a dc and resync from the master? Like not applying the diff of a > > > replication but just wipe the whole thing and replicate from > > > scratch? > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > > alexander.harm at apfel-q.de) wrote: > > > > > > > > > Hi Andrew, > > > > > > > > > > I guess there is a typo in your request. Find attached the > > > output of the following queries: > > > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > 83e6-cfcfdae11bc4' --show-deleted > > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > > show-deleted > > > > > Looks like DC01 cannot move the device from registered to > > > deleted, no? > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > > 4304-83e6- > > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > > > eg > > > > > > > > > > > > ldbsearch -H sam.ldb -s base -b > 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > > cfcfdae11bc4,CN=Deleted > > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > > > I'm trying to understand what > msDS-KeyCredentialLink is set > > > to before > > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > > Hi Andrew, > > > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > > > dc01: already existing Samba DC which showed the > problems > > > > > > > dc03: new Samba DC to see if problems could be worked > > > around by setting up new DCs > > > > > > > your patches are applied to both > > > > > > > The chronological order as follows: > > > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > > reason when trying to replicate from Windows AD > > > > > > > debug_dc03_repfrom_winad.txt: I then tried to > replicate the > > > new DC > > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > > dc01 to work around the auth errors concerning the AD > > > > > > > Does this help you further? Can you confirm that > dc03 works > > > in fact fine? > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > > > That, and another one (from my own attempts to > reproduce > > > by manually > > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander > Harm wrote: > > > > > > > > > I am apparently too stupid to just download the > > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > The new patch on it's own and with the > earlier patch > > > (to make it non- > > > > > > > > > > critical) would be helpful. There are > multiple errors > > > here and we need > > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > > wrote: > > > > > > > > > > > Sorry, was a bit confused myself. I will > apply your > > > patch and report the result. Just to confirm, we speak about > > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew > Bartlett > > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community > support > > > issues, which is why it > > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > > results after you apply > > > > > > > > > > > > this patch (on master, but might backport > > > cleanly). > > > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > > information) I'll > > > > > > > > > > > > propose it for a future Samba version. > Still not > > > a fix for the actual > > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, > Alexander Harm > > > via samba wrote: > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my > options > > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > > don't think the patch I > > > > > > > > > > > > > included is the right approach, and I can't > > > reproduce what I thought > > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 > but that > > > just > > > > > > > > > > > > > shows that what we were doing still > works, so > > > it isn't terribly useful > > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really > good next > > > step, something DB- > > > > > > > > > > > > > specific appears to be going on, > particularly > > > as you then get another > > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > > Bartlett via samba wrote: > > > > > > > > > > > > > > Thanks. At this stage is looks like > a bug in > > > the repl_meta_data > > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > > affiliation (eg employer) > > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > > request once I have a test to > > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, > Alexander > > > Harm via samba wrote: > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication > since then > > > and I'm keen to rule > > > > > > > > > > > > > > > out > > > > > > > > > > > > > > > things we have already fixed > before digging > > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > 09:55:02, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version > is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > 09:42:01, Andrew > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > > There are long lines that > > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > I did but these are the > last lines. > > > It ends with ?raise e? > > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > > they all end with ?raise > > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > > logs out of a terminal and > > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > > critical (groan...) details > > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > > went wrong with the apparent > > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > > attached the output of the > > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at > 23:41 +0100, > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help > resolving > > > a replication issue we > > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs > replicate > > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com > --sync- > > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with > --local and we > > > should get a better set > > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > > Team http://samba.org > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, > Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > To unsubscribe from this list > go to the > > > following URL and read > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list > go to the > > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > Andrew Bartlett > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > following URL and read > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > -- > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > > Authentication Developer, Samba Team > > > https://samba.org > > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > > Expert Open Source > > > > > > > > > > > > > Solutions > > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > To unsubscribe from this list go to the > > > following URL and read the > > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > -- > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > Authentication Developer, Samba Team > > > http://samba.org > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > To unsubscribe from this list go to the > following > > > URL and read the > > > > > > > > > > > > instructions: > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > -- > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > Authentication Developer, Samba Team > http://samba.org > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > -- > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > Samba Developer, Catalyst IT > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > -- > > > Andrew Bartlett http://samba.org/~abartlet/ > > > Authentication Developer, Samba Team http://samba.org > > > Samba Developer, Catalyst IT > http://catalyst.net.nz/services/samba > > > > > > > -- > Andrew Bartlett > https://samba.org/~abartlet/ > Authentication Developer, Samba Team https://samba.org > Samba Development and Support, Catalyst IT - Expert Open Source > Solutions > https://catalyst.net.nz/services/samba > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
So, the reason this happens is if in the long time replication to this DC has been broken the local idea of the DNS layout for the other DCs has changed, perhaps because of an un-join/re-join. By pointing to the other DC for the resolv.conf, you likely also caused Samba to use the other DC for DNS, and then get an updated copy locally. Contrary to what you might expect --sync-all is not to sync all partitions, but to sync to all DCs, so you would need to sync the DNS partition manually otherwise. Andrew Bartlett On Tue, 2020-03-03 at 12:39 +0100, Alexander Harm via samba wrote:> Exactly! > > > > > On 3. March 2020 at 11:07:02, L.P.H. van Belle via samba (samba at lists.samba.org) wrote: > > Just to confirm this. > Im guessing you use this part : > > > For the DsREplicatSync error, i would suggest these steps first. > > DC2, change the resolv.conf, set DC1 first, then DC2, reboot. > > Wait 5 min, now check replication again, if its ok, now you can change > the resolv.conf back. > > Greetz, > > Louis > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Alexander Harm via samba > > Verzonden: dinsdag 3 maart 2020 10:35 > > Aan: samba at lists.samba.org > > Onderwerp: Re: [Samba] [PATCH] Re: Failing replication > > > > OK, found this post from Louis and this fixed it for me. > > > > https://lists.samba.org/archive/samba/2019-April/222278.html > > > > @Andrew: thanks so much for your time, effort and support the > > last days! > > > > Alexander > > > > > > > > > > On 3. March 2020 at 10:01:59, Alexander Harm > > (alexander.harm at apfel-q.de) wrote: > > > > That did the trick for manual replication via > > > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com > > --sync-all --local -d 9 > > > > However, if I run samba-tool drs showrepl it shows me a > > > > result 1326 (WERR_LOGON_FAILURE) > > > > and also > > > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > > > fails with the same error. > > > > How can I fix this? > > > > > > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > > (abartlet at samba.org) wrote: > > > > I think I have this finally fixed here: > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > > > Thanks for your patience, > > > > Andrew Bartlett > > > > On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote: > > > Hi Andrew, > > > > > > that is great news. Thanks so much for your support through this. > > > > > > Alexander > > > > > > > > > > > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > > > wrote: > > > > > > > You can just join a new DC and demote the failing one, or the > > > > reverse, > > > > demote the failing one and rejoin it. > > > > > > > > However I'm pretty close to a patch and have a test that > > > > reproduces > > > > this locally, so expect some good news soon. > > > > > > > > Andrew Bartlett > > > > > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > > > Question: is there a possibility to delete the current > > records of > > > > a dc and resync from the master? Like not applying the diff of a > > > > replication but just wipe the whole thing and replicate from > > > > scratch? > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > > > alexander.harm at apfel-q.de) wrote: > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > I guess there is a typo in your request. Find attached the > > > > output of the following queries: > > > > > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > > 83e6-cfcfdae11bc4' --show-deleted > > > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > > > show-deleted > > > > > > Looks like DC01 cannot move the device from registered to > > > > deleted, no? > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > > > 4304-83e6- > > > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > > > > > eg > > > > > > > > > > > > > > ldbsearch -H sam.ldb -s base -b > > 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > > > cfcfdae11bc4,CN=Deleted > > > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > > > > > I'm trying to understand what > > msDS-KeyCredentialLink is set > > > > to before > > > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > > > > > dc01: already existing Samba DC which showed the > > problems > > > > > > > > dc03: new Samba DC to see if problems could be worked > > > > around by setting up new DCs > > > > > > > > your patches are applied to both > > > > > > > > The chronological order as follows: > > > > > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > > > reason when trying to replicate from Windows AD > > > > > > > > debug_dc03_repfrom_winad.txt: I then tried to > > replicate the > > > > new DC > > > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > > > dc01 to work around the auth errors concerning the AD > > > > > > > > Does this help you further? Can you confirm that > > dc03 works > > > > in fact fine? > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > > > > > That, and another one (from my own attempts to > > reproduce > > > > by manually > > > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander > > Harm wrote: > > > > > > > > > > I am apparently too stupid to just download the > > > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > The new patch on it's own and with the > > earlier patch > > > > (to make it non- > > > > > > > > > > > critical) would be helpful. There are > > multiple errors > > > > here and we need > > > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > > > wrote: > > > > > > > > > > > > Sorry, was a bit confused myself. I will > > apply your > > > > patch and report the result. Just to confirm, we speak about > > > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew > > Bartlett > > > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community > > support > > > > issues, which is why it > > > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > > > results after you apply > > > > > > > > > > > > > this patch (on master, but might backport > > > > cleanly). > > > > > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > > > information) I'll > > > > > > > > > > > > > propose it for a future Samba version. > > Still not > > > > a fix for the actual > > > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, > > Alexander Harm > > > > via samba wrote: > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my > > options > > > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > > > don't think the patch I > > > > > > > > > > > > > > included is the right approach, and I can't > > > > reproduce what I thought > > > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 > > but that > > > > just > > > > > > > > > > > > > > shows that what we were doing still > > works, so > > > > it isn't terribly useful > > > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really > > good next > > > > step, something DB- > > > > > > > > > > > > > > specific appears to be going on, > > particularly > > > > as you then get another > > > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > > > Bartlett via samba wrote: > > > > > > > > > > > > > > > Thanks. At this stage is looks like > > a bug in > > > > the repl_meta_data > > > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > > > affiliation (eg employer) > > > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > > > request once I have a test to > > > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, > > Alexander > > > > Harm via samba wrote: > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication > > since then > > > > and I'm keen to rule > > > > > > > > > > > > > > > > out > > > > > > > > > > > > > > > > things we have already fixed > > before digging > > > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > > 09:55:02, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version > > is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > > 09:42:01, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > > > There are long lines that > > > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > I did but these are the > > last lines. > > > > It ends with ?raise e? > > > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > > > they all end with ?raise > > > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > > > logs out of a terminal and > > > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > > > critical (groan...) details > > > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > > > went wrong with the apparent > > > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > > > attached the output of the > > > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at > > 23:41 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help > > resolving > > > > a replication issue we > > > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs > > replicate > > > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com > > --sync- > > > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with > > --local and we > > > > should get a better set > > > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > > > Team http://samba.org > > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > Authentication Developer, > > Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > To unsubscribe from this list > > go to the > > > > following URL and read > > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > To unsubscribe from this list > > go to the > > > > following URL and read > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > https://samba.org > > > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > > > Expert Open Source > > > > > > > > > > > > > > Solutions > > > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > > following URL and read the > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > -- > > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > To unsubscribe from this list go to the > > following > > > > URL and read the > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > -- > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > -- > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > -- > > Andrew Bartlett > > https://samba.org/~abartlet/ > > Authentication Developer, Samba Team https://samba.org > > Samba Development and Support, Catalyst IT - Expert Open Source > > Solutions > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Thanks for the explanation. I have a few more sites which I will test today and feedback if a manual sync of the DNS partition solves the problem as well. Alexander On 3. March 2020 at 18:54:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: So, the reason this happens is if in the long time replication to this DC has been broken the local idea of the DNS layout for the other DCs has changed, perhaps because of an un-join/re-join. By pointing to the other DC for the resolv.conf, you likely also caused Samba to use the other DC for DNS, and then get an updated copy locally. Contrary to what you might expect --sync-all is not to sync all partitions, but to sync to all DCs, so you would need to sync the DNS partition manually otherwise. Andrew Bartlett On Tue, 2020-03-03 at 12:39 +0100, Alexander Harm via samba wrote:> Exactly! > > > > > On 3. March 2020 at 11:07:02, L.P.H. van Belle via samba (samba at lists.samba.org) wrote: > > Just to confirm this. > Im guessing you use this part : > > > For the DsREplicatSync error, i would suggest these steps first. > > DC2, change the resolv.conf, set DC1 first, then DC2, reboot. > > Wait 5 min, now check replication again, if its ok, now you can change > the resolv.conf back. > > Greetz, > > Louis > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Alexander Harm via samba > > Verzonden: dinsdag 3 maart 2020 10:35 > > Aan: samba at lists.samba.org > > Onderwerp: Re: [Samba] [PATCH] Re: Failing replication > > > > OK, found this post from Louis and this fixed it for me. > > > > https://lists.samba.org/archive/samba/2019-April/222278.html > > > > @Andrew: thanks so much for your time, effort and support the > > last days! > > > > Alexander > > > > > > > > > > On 3. March 2020 at 10:01:59, Alexander Harm > > (alexander.harm at apfel-q.de) wrote: > > > > That did the trick for manual replication via > > > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com > > --sync-all --local -d 9 > > > > However, if I run samba-tool drs showrepl it shows me a > > > > result 1326 (WERR_LOGON_FAILURE) > > > > and also > > > > samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync > > > > fails with the same error. > > > > How can I fix this? > > > > > > > > > > On 3. March 2020 at 04:23:02, Andrew Bartlett > > (abartlet at samba.org) wrote: > > > > I think I have this finally fixed here: > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1189 > > https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch > > > > Thanks for your patience, > > > > Andrew Bartlett > > > > On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote: > > > Hi Andrew, > > > > > > that is great news. Thanks so much for your support through this. > > > > > > Alexander > > > > > > > > > > > > > > > On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org) > > > wrote: > > > > > > > You can just join a new DC and demote the failing one, or the > > > > reverse, > > > > demote the failing one and rejoin it. > > > > > > > > However I'm pretty close to a patch and have a test that > > > > reproduces > > > > this locally, so expect some good news soon. > > > > > > > > Andrew Bartlett > > > > > > > > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote: > > > > > Question: is there a possibility to delete the current > > records of > > > > a dc and resync from the master? Like not applying the diff of a > > > > replication but just wipe the whole thing and replicate from > > > > scratch? > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 09:23:12, Alexander Harm ( > > > > alexander.harm at apfel-q.de) wrote: > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > I guess there is a typo in your request. Find attached the > > > > output of the following queries: > > > > > > > > > > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted > > > > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > > 83e6-cfcfdae11bc4' --show-deleted > > > > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304- > > > > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' -- > > > > show-deleted > > > > > > Looks like DC01 cannot move the device from registered to > > > > deleted, no? > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 29. February 2020 at 08:57:01, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > Can you show me the full contents of: > > > > > > > > > > > > > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0- > > > > 4304-83e6- > > > > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' > > > > > > > > > > > > > > eg > > > > > > > > > > > > > > ldbsearch -H sam.ldb -s base -b > > 'CN=cfc3ffe7-22b1-4ae3-aef4- > > > > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6- > > > > cfcfdae11bc4,CN=Deleted > > > > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted > > > > > > > > > > > > > > I'm trying to understand what > > msDS-KeyCredentialLink is set > > > > to before > > > > > > > we start, as this is where problem starts (I think). > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote: > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > attached the three debug outputs. > > > > > > > > > > > > > > > > dc01: already existing Samba DC which showed the > > problems > > > > > > > > dc03: new Samba DC to see if problems could be worked > > > > around by setting up new DCs > > > > > > > > your patches are applied to both > > > > > > > > The chronological order as follows: > > > > > > > > > > > > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some > > > > reason when trying to replicate from Windows AD > > > > > > > > debug_dc03_repfrom_winad.txt: I then tried to > > replicate the > > > > new DC > > > > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to > > > > dc01 to work around the auth errors concerning the AD > > > > > > > > Does this help you further? Can you confirm that > > dc03 works > > > > in fact fine? > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > I attached the patch. > > > > > > > > > > > > > > > > > > That, and another one (from my own attempts to > > reproduce > > > > by manually > > > > > > > > > corrupting the DB), are here: > > > > > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander > > Harm wrote: > > > > > > > > > > I am apparently too stupid to just download the > > > > diff/patch from gitlab? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett ( > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > The new patch on it's own and with the > > earlier patch > > > > (to make it non- > > > > > > > > > > > critical) would be helpful. There are > > multiple errors > > > > here and we need > > > > > > > > > > > good debugging for both. > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm > > > > wrote: > > > > > > > > > > > > Sorry, was a bit confused myself. I will > > apply your > > > > patch and report the result. Just to confirm, we speak about > > > > ebd9bee3 (which I already applied) and now 609181e0? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew > > Bartlett > > > > via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > I'm pretty swamped with other community > > support > > > > issues, which is why it > > > > > > > > > > > > > is taking so long to get back to you. > > > > > > > > > > > > > > > > > > > > > > > > > > It would at least be interesting to see the > > > > results after you apply > > > > > > > > > > > > > this patch (on master, but might backport > > > > cleanly). > > > > > > > > > > > > > > > > > > > > > > > > > > If it works for you (in terms of giving useful > > > > information) I'll > > > > > > > > > > > > > propose it for a future Samba version. > > Still not > > > > a fix for the actual > > > > > > > > > > > > > issue, but it might tell us what is going on. > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, > > Alexander Harm > > > > via samba wrote: > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your feedback. What are my > > options > > > > now? Nuke the whole thing? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew > > > > Bartlett via samba (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > This is looking trickier than I had hoped. I > > > > don't think the patch I > > > > > > > > > > > > > > included is the right approach, and I can't > > > > reproduce what I thought > > > > > > > > > > > > > > was the issue on master. > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've added a test in MR > > > > > > > > > > > > > > > > > > https://gitlab.com/samba-team/samba/-/merge_requests/1128 > > but that > > > > just > > > > > > > > > > > > > > shows that what we were doing still > > works, so > > > > it isn't terribly useful > > > > > > > > > > > > > > in your case. > > > > > > > > > > > > > > > > > > > > > > > > > > > > I'm sorry that I don't have a really > > good next > > > > step, something DB- > > > > > > > > > > > > > > specific appears to be going on, > > particularly > > > > as you then get another > > > > > > > > > > > > > > error once we fix this one. > > > > > > > > > > > > > > > > > > > > > > > > > > > > Sorry! > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew > > > > Bartlett via samba wrote: > > > > > > > > > > > > > > > Thanks. At this stage is looks like > > a bug in > > > > the repl_meta_data > > > > > > > > > > > > > > > module. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Try the attached patch. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can I name you in the bug and is there any > > > > affiliation (eg employer) > > > > > > > > > > > > > > > you would like named? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I've filed a bug and will file a merge > > > > request once I have a test to > > > > > > > > > > > > > > > confirm this. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://bugzilla.samba.org/show_bug.cgi?id=14272 > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, > > Alexander > > > > Harm via samba wrote: > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > as instructed I upgraded to ?Version > > > > 4.11.6-Debian?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Attached the new debug file. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I would fix that first, please run Samba > > > > 4.11. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > We have done much on replication > > since then > > > > and I'm keen to rule > > > > > > > > > > > > > > > > out > > > > > > > > > > > > > > > > things we have already fixed > > before digging > > > > into this further. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > Version 4.9.5-Debian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > > 09:55:02, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Much better. What Samba version > > is this? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > Is this better? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at > > 09:42:01, Andrew > > > > Bartlett via samba ( > > > > > > > > > > > > > > > > > > samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I mean the final columns, not lines. > > > > There are long lines that > > > > > > > > > > > > > > > > > > seem to > > > > > > > > > > > > > > > > > > be cut off mid-word, rather than > > > > wrapped. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > I did but these are the > > last lines. > > > > It ends with ?raise e? > > > > > > > > > > > > > > > > > > > also in the shell. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I also ran it on the other DCs and > > > > they all end with ?raise > > > > > > > > > > > > > > > > > > > e?. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02, > > > > Andrew Bartlett ( > > > > > > > > > > > > > > > > > > > abartlet at samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > G'Day Alexander, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > It looks like you have copied the > > > > logs out of a terminal and > > > > > > > > > > > > > > > > > > > lost the > > > > > > > > > > > > > > > > > > > ends of the lines. Those have the > > > > critical (groan...) details > > > > > > > > > > > > > > > > > > > of what > > > > > > > > > > > > > > > > > > > went wrong with the apparent > > > > 'critical extension' failure. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Can you try and get those and I'll > > > > look at them tomorrow. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thanks! > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > Hi Andrew, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thanks for your reply. Find > > > > attached the output of the > > > > > > > > > > > > > > > > > > > > command. Looks like it fails on > > > > renaming an object to me. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Regards, Alexander > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02, > > > > Andrew Bartlett via samba > > > > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at > > 23:41 +0100, > > > > Alexander Harm via samba > > > > > > > > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > > > > Hello, > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > we could need some help > > resolving > > > > a replication issue we > > > > > > > > > > > > > > > > > > > > > experience since one week. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Running samba-tool drs > > replicate > > > > ka-h9-dc02 VMDC-AZURE-01 > > > > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com > > --sync- > > > > all -d 9 returns > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Do that again with > > --local and we > > > > should get a better set > > > > > > > > > > > > > > > > > > > > of info in > > > > > > > > > > > > > > > > > > > > the logs. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba > > > > Team http://samba.org > > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > Authentication Developer, > > Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > > To unsubscribe from this list > > go to the > > > > following URL and read > > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > Andrew Bartlett > > > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > > To unsubscribe from this list > > go to the > > > > following URL and read > > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > Andrew Bartlett > > http://samba.org/~abartlet/ > > > > > > > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > > following URL and read > > > > > > > > > > > > > > > > the > > > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > Andrew Bartlett > > > > > > > > > > > > > > https://samba.org/~abartlet/ > > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > https://samba.org > > > > > > > > > > > > > > Samba Development and Support, Catalyst IT - > > > > Expert Open Source > > > > > > > > > > > > > > Solutions > > > > > > > > > > > > > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > > To unsubscribe from this list go to the > > > > following URL and read the > > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > > > -- > > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > > > Authentication Developer, Samba Team > > > > http://samba.org > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > > > > > To unsubscribe from this list go to the > > following > > > > URL and read the > > > > > > > > > > > > > instructions: > > > > https://lists.samba.org/mailman/options/samba > > > > > > > > > > > -- > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > > > Authentication Developer, Samba Team > > http://samba.org > > > > > > > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > -- > > > > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > > > > Authentication Developer, Samba Team http://samba.org > > > > > > > Samba Developer, Catalyst IT > > > > http://catalyst.net.nz/services/samba > > > > > > > > > > > > > > > > > > -- > > > > Andrew Bartlett http://samba.org/~abartlet/ > > > > Authentication Developer, Samba Team http://samba.org > > > > Samba Developer, Catalyst IT > > http://catalyst.net.nz/services/samba > > > > > > > > > > -- > > Andrew Bartlett > > https://samba.org/~abartlet/ > > Authentication Developer, Samba Team https://samba.org > > Samba Development and Support, Catalyst IT - Expert Open Source > > Solutions > > https://catalyst.net.nz/services/samba > > > > > > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
@Louis Any chance of getting this patch in your Debian packages? Just to know if I need to be careful if updating. Alexander On 10. March 2020 at 01:24:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote: On Tue, 2020-03-03 at 10:35 +0100, Alexander Harm via samba wrote:> OK, found this post from Louis and this fixed it for me. > > https://lists.samba.org/archive/samba/2019-April/222278.html > > @Andrew: thanks so much for your time, effort and support the last > days! > > Alexander >No worries. Hopefully we can get the patch merged soon! Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT - Expert Open Source Solutions https://catalyst.net.nz/services/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba