samba - Mar 2021 - RODC and Tombstones

Hello all,
now that we have an RODC running I have seen some things I want to clarify.
Is it normal that one gets these errors?

  ../../source4/dsdb/kcc/garbage_collect_tombstones.c:105: Failed to 
remove deleted object

And that the accumulate? Already around 1000 Tombstones (mainly DNS 
Entries). I can delete them on the normal DCs but they stay on the RODC.

Normal?

Regards

Christian

-- 
Dr. Christian Naumer
Vice President
Unit Head Bioprocess Development

B.R.A.I.N Aktiengesellschaft
Darmstaedter Str. 34-36, D-64673 Zwingenberg
e-mail cn at brain-biotech.com, homepage www.brain-biotech.com
phone +49-6251-9331-30 / fax +49-6251-9331-11

Sitz der Gesellschaft: Zwingenberg/Bergstrasse
Registergericht AG Darmstadt, HRB 24758
Vorstand: Adriaan Moelker (Vorstandsvorsitzender), 
Lukas Linnig
Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen

On 20/03/2021 11:28, cn--- via samba wrote:
> Hello all,
> now that we have an RODC running I have seen some things I want to 
> clarify.
> Is it normal that one gets these errors?
>
> ?../../source4/dsdb/kcc/garbage_collect_tombstones.c:105: Failed to 
> remove deleted object
>
> And that the accumulate? Already around 1000 Tombstones (mainly DNS 
> Entries). I can delete them on the normal DCs but they stay on the RODC.
>
> Normal?

 From my understanding of RODC's, yes and no ?

A RODC hosts a read-only copy of the DNS records, so it cannot update 
dns records, these should be done on a RWDC and replicated back, so the 
error message is correct. In my opinion, that is a bug, it shouldn't be 
run against a RODC and the tombstone deletions should be done by 
replication from a RWDC, something that doesn't seem to be happening in 
your case.

can you please open a bug report about this.

Rowland