On Fri, 23 Oct 2020, Rowland penny via samba wrote:
> On 23/10/2020 15:03, Tom Diehl via samba wrote:
>> Hi,
>>
>> I have 2 DC's. One is running 4.10.18 and the other is running
4.11.14.
>> I am planning on upgrading the 4.10.18 DC to 4.11.14 and then both up
to
>> 4.12r.latest.
>>
>> In doing this I ran samba-tool dbcheck --reindex and got the following
>> warning:
>>
>> (vdc1 pts8) # samba-tool dbcheck --reindex
>> Re-indexing...
>> ../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute
value
>> in CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com for index
on
>> servicePrincipalName, duplicate of objectGUID
>> bd1c4b7c-c573-444c-951e-ff932612a111 in
>> @INDEX:SERVICEPRINCIPALNAME:TERMSRV/SHOPOFFICE-20.KMG.MYDOMAIN.COM
>> completed re-index OK
>> (vdc1 pts8)
>>
>> Does anyone know how to fix this?
>>
>> Regards,
>>
> First 'warning' != 'error', the 'completed re-index
OK' shows this.
Right I get that but I would like to clean it up if I can.
>
> It is possible that you have a duplicate SPN.
I am not sure. If I do:
(vdc1 pts9) # samba-tool spn list SHOPOFFICE-20$
shopoffice-20$
User CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com has the following
servicePrincipalName:
HOST/ShopOffice-20.kmg.mydomain.com
RestrictedKrbHost/ShopOffice-20.kmg.mydomain.com
HOST/SHOPOFFICE-20
RestrictedKrbHost/SHOPOFFICE-20
TERMSRV/ShopOffice-20.kmg.mydomain.com
TERMSRV/SHOPOFFICE-20
TERMSRV/SHOPOFFICE-20.kmg.mydomain.com
(vdc1 pts9) #
The above is what I get. Is this the correct way check or is there
something else I should be looking at?
I see the TERMSRV/SHOPOFFICE-20.kmg.mydomain.com is listed twice.
Is this the problem? If yes what is the correct way to fix this?
Regards,
--
Tom me at tdiehl.org