Hello, I did a minor upgrade on an RO DC from 4.14.7 to 4.14.8 following the instructions from the wiki for the "in place" one, but for AD DC. I had run samba-tool dbcheck before upgrade and got no errors. Then I did the upgrade and then after a post upgrade dbcheck I found that nearly all records were signed as to fix. Did use dbcheck --fix and all records started scrolling during check and were eventually reported as fixed. Checking back again I was surprised to find that it reported checked all records and (1 errors) between parenthesis. Tried again with --fix. The erros stays between parenthesis. I checked if I had login problems to the RO DC from a client and noticed no strange behaviour.> samba-tool dbcheck --fix > Checking 2000 objects > Checked 2000 objects (1 errors)But the result is the same even when using -v option and checking the output for error reporting lines or clues. Perhaps I am missing something fundamental here as to how the RODC database should be treated. Last information: I forced replication from an AD DC and eventually succeeded without errors. Re-issuing samba-tool dbcheck, gave the same output. Please note that the original AD DC for replication had dbcheck without errors (only two "notes"). Could you help me out in finding where I can search for the actual error and fix it, or point out if I am completely out of path because I miss something in the base concept of an RODC? Should I just skip dbcheck completely because not applicable on an RO DC (could give false results/positives) due to its nature? Thank you very much in advance. -- ?forumZFD Entschieden f?r Frieden|Committed to Peace Ilias Chasapakis Referent IT | IT Consultant Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am K?lner Brett 8 | 50825 K?ln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht K?ln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 665 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20211007/89fe2560/OpenPGP_signature.sig>
On Thu, 2021-10-07 at 17:44 +0200, Ilias Chasapakis forumZFD via samba wrote:> Hello, > > I did a minor upgrade on an RO DC from 4.14.7 to 4.14.8 following the > instructions from the wiki for the "in place" one, but for AD DC. > > I had run samba-tool dbcheck before upgrade and got no errors. Then I > did the upgrade and then after a post upgrade dbcheck I found that > nearly all records were signed as to fix. Did use dbcheck --fix and > all > records started scrolling during check and were eventually reported > as > fixed. > > Checking back again I was surprised to find that it reported checked > all > records and (1 errors) between parenthesis. Tried again with --fix. > The > erros stays between parenthesis. I checked if I had login problems to > the RO DC from a client and noticed no strange behaviour. > > > samba-tool dbcheck --fix > > Checking 2000 objects > > Checked 2000 objects (1 errors)What is the error? Not all errors can be fixed. If you can't find it I wouldn't worry, most Samba DBs have errors and on the RODC dbcheck is going to have a harder time fixing a lot of things, I would run that on your full DC also. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions