[Samba] ldapcmp failed after windows server 2012 AD joined

Rowland Penny
2022-03-25T10:11:28Z

On Fri, 2022-03-25 at 17:57 +0800, Adam Xu via samba
wrote:
> Hi samba list,
>
> I joined  a windows server 2012 R2 to My samba AD recently.
>
> now I have 4 DCs?
>
> DC1: samba ad  ver:4.15.6
>
> DC2: samba ad  ver:4.15.6
>
> DC3: samba RODC  ver:4.15.6
>
> DC4: windows server 2012 R2 ad
>
> when I run:
>
> samba-tool ldapcmp ldap://DC1 ldap://DC4 -Uadministrator
>
> here's the result:
>
> * Comparing [CONFIGURATION] context...
>
> * Objects to be compared: 1791
>
> Comparing:
> 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1]
> 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4]
>      Difference in attribute values:
>          instanceType =>
> [b'13']
> [b'5']
>
>      FAILED

The 'instanceType' attribute can be different, so you do not have a
problem. You can filter out attributes like this, see 'samba-tool
ldapcmp --help' for more information.

Rowland