Hi samba list, I joined? a windows server 2012 R2 to My samba AD recently. now I have 4 DCs? DC1: samba ad? ver:4.15.6 DC2: samba ad? ver:4.15.6 DC3: samba RODC? ver:4.15.6 DC4: windows server 2012 R2 ad when I run: samba-tool ldapcmp ldap://DC1 ldap://DC4 -Uadministrator here's the result: * Comparing [CONFIGURATION] context... * Objects to be compared: 1791 Comparing: 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1] 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4] ??? Difference in attribute values: ??????? instanceType => [b'13'] [b'5'] ??? FAILED * Result for [CONFIGURATION]: FAILURE SUMMARY --------- Attributes with different values: ??? instanceType * Comparing [SCHEMA] context... * Objects to be compared: 1739 Comparing: 'CN=SCHEMA,CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1] 'CN=SCHEMA,CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4] ??? Difference in attribute values: ??????? instanceType => [b'13'] [b'5'] ??? FAILED * Result for [SCHEMA]: FAILURE SUMMARY --------- Attributes with different values: ??? instanceType * Comparing [DNSDOMAIN] context... * Objects to be compared: 103 * Result for [DNSDOMAIN]: SUCCESS * Comparing [DNSFOREST] context... * Objects to be compared: 24 * Result for [DNSFOREST]: SUCCESS ERROR: Compare failed: -1 and when I run samba-tool dbcheck --cross-ncs --fix the error remains.
Rowland Penny
2022-Mar-25 10:11 UTC
[Samba] ldapcmp failed after windows server 2012 AD joined
On Fri, 2022-03-25 at 17:57 +0800, Adam Xu via samba wrote:> Hi samba list, > > I joined a windows server 2012 R2 to My samba AD recently. > > now I have 4 DCs? > > DC1: samba ad ver:4.15.6 > > DC2: samba ad ver:4.15.6 > > DC3: samba RODC ver:4.15.6 > > DC4: windows server 2012 R2 ad > > when I run: > > samba-tool ldapcmp ldap://DC1 ldap://DC4 -Uadministrator > > here's the result: > > * Comparing [CONFIGURATION] context... > > * Objects to be compared: 1791 > > Comparing: > 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1] > 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4] > Difference in attribute values: > instanceType => > [b'13'] > [b'5'] > > FAILEDThe 'instanceType' attribute can be different, so you do not have a problem. You can filter out attributes like this, see 'samba-tool ldapcmp --help' for more information. Rowland