thr3ads.net - samba - [Samba] Pukey AD Replication info. [Jun 2022]

If this information is useful, please help other people find it:
Share via:

Zombie Ryushu

2022-Jun-05 20:11 UTC

[Samba] Failure attempting to demote a DC.

On 6/5/22 15:48, Norbert Hanke via samba wrote:> Did replication between this DC and the other DCs in the domain work
> before, and are they online at this moment?
>
> While being demoted a DC asks its sync partners to do a last
> synchronization.
>
> On 03.06.2022 03:39, Zombie Ryushu via samba wrote:
>> ERROR(<class 'samba.drs_utils.drsException'>):
DsReplicaSync failed -
>> drsException: DsReplicaSync failed (8440, 'WERR_DS_DRA_BAD_NC')
>> ?File
"/usr/lib64/python3.6/site-packages/samba/netcmd/drs.py", line
>> 570, in run
>> ???drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
>> source_dsa_guid, NC, req_options)
>> ?File
"/usr/lib64/python3.6/site-packages/samba/drs_utils.py", line
>> 92, in sendDsReplicaSync
>> ???raise drsException("DsReplicaSync failed %s" % estr)
>>
>> This happens when I try to demote a DC Normally.
>I believe that it does. But using the "Visualization tools" I've
seen
some evidence something is wrong with replication due to the Green Zero 
becoming a Red Dash. on Olympia. (The name of the node in question.)

To try to correct this, I've removed the DC by force, using the remove 
dead DC command from its peer DC kefka.pukey, then deleted all 
/var/lib/samba/private LDB and TDB Files, then? rejoined to the exact 
same results.

Zombie Ryushu

2022-Jun-05 20:47 UTC

head link

[Samba] Pukey AD Replication info.

I brought up all of the systems for this.

Default-First-Site-Name\OLYMPIA

DSA Options: 0x00000001
DSA object GUID: d02fb6d3-feec-46ec-bcb1-dad7bdd64e27
DSA invocationId: 433e922f-354f-45b6-b1a3-ad5baf213592

==== INBOUND NEIGHBORS ===
DC=DomainDnsZones,DC=pukey
 ???????Default-First-Site-Name\KEFKA via RPC
 ???????????????DSA object GUID: c0ad4d18-ce25-4198-8e21-694c0727fecf
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

DC=DomainDnsZones,DC=pukey
 ???????Default-First-Site-Name\SERENITY via RPC
 ???????????????DSA object GUID: 602bdd9f-a9a0-411d-9f1b-04a63ea93653
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

DC=pukey
 ???????Default-First-Site-Name\KEFKA via RPC
 ???????????????DSA object GUID: c0ad4d18-ce25-4198-8e21-694c0727fecf
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

> sudo  samba-tool drs uptodatenessMissing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
DOMAIN ?????????maximum: 0 ?median: 0.0 ?failure: 2
CONFIGURATION ??maximum: 0 ?median: 0.0 ?failure: 2
SCHEMA ?????????maximum: 0 ?median: 0.0 ?failure: 2
DNSDOMAIN ??????maximum: 0 ?median: 0.0 ?failure: 2
DNSFOREST ??????maximum: 0 ?median: 0.0 ?failure: 2

Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector

DOMAIN

out-of-date-ness
,--- 
CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
|,-- 
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
DC||,- 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ??CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey000
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector

CONFIGURATION

out-of-date-ness
,--- 
CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
|,-- 
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
DC||,- 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ??CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey000
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector

SCHEMA

out-of-date-ness
,--- 
CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
|,-- 
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
DC||,- 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ??CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey000
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector

DNSDOMAIN

out-of-date-ness
,--- 
CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
|,-- 
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
DC||,- 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ??CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey000
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector
Missing dn 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
from UTD vector

DNSFOREST

out-of-date-ness
,--- 
CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
|,-- 
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
DC||,- 
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ??CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey00-
CN=OLYMPIA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey000


DC=pukey
 ???????Default-First-Site-Name\SERENITY via RPC
 ???????????????DSA object GUID: 602bdd9f-a9a0-411d-9f1b-04a63ea93653
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

DC=ForestDnsZones,DC=pukey
 ???????Default-First-Site-Name\KEFKA via RPC
 ???????????????DSA object GUID: c0ad4d18-ce25-4198-8e21-694c0727fecf
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

DC=ForestDnsZones,DC=pukey
 ???????Default-First-Site-Name\SERENITY via RPC
 ???????????????DSA object GUID: 602bdd9f-a9a0-411d-9f1b-04a63ea93653
 ???????????????Last attempt @ Sun Jun ?5 16:37:00 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:00 2022 EDT

CN=Configuration,DC=pukey
 ???????Default-First-Site-Name\KEFKA via RPC
 ???????????????DSA object GUID: c0ad4d18-ce25-4198-8e21-694c0727fecf
 ???????????????Last attempt @ Sun Jun ?5 16:37:01 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:01 2022 EDT

CN=Configuration,DC=pukey
 ???????Default-First-Site-Name\SERENITY via RPC
 ???????????????DSA object GUID: 602bdd9f-a9a0-411d-9f1b-04a63ea93653
 ???????????????Last attempt @ Sun Jun ?5 16:37:01 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:01 2022 EDT

CN=Schema,CN=Configuration,DC=pukey
 ???????Default-First-Site-Name\KEFKA via RPC
 ???????????????DSA object GUID: c0ad4d18-ce25-4198-8e21-694c0727fecf
 ???????????????Last attempt @ Sun Jun ?5 16:37:01 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:01 2022 EDT

CN=Schema,CN=Configuration,DC=pukey
 ???????Default-First-Site-Name\SERENITY via RPC
 ???????????????DSA object GUID: 602bdd9f-a9a0-411d-9f1b-04a63ea93653
 ???????????????Last attempt @ Sun Jun ?5 16:37:01 2022 EDT was successful
 ???????????????0 consecutive failure(s).
 ???????????????Last success @ Sun Jun ?5 16:37:01 2022 EDT

==== OUTBOUND NEIGHBORS ===
==== KCC CONNECTION OBJECTS ===
Connection --
 ???????Connection name: e6f8578e-bb1c-4de2-bde7-1829af558856
 ???????Enabled ???????: TRUE
 ???????Server DNS name : kefka.pukey
 ???????Server DN name ?: CN=NTDS 
Settings,CN=KEFKA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ???????????????TransportType: RPC
 ???????????????options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
 ???????Connection name: 4ec0d7e6-dec3-45bd-a16a-f39c514c1ed5
 ???????Enabled ???????: TRUE
 ???????Server DNS name : serenity.pukey
 ???????Server DN name ?: CN=NTDS 
Settings,CN=SERENITY,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pukey
 ???????????????TransportType: RPC
 ???????????????options: 0x00000001
Warning: No NC replicated for Connection!

samba - Jun 2022 - Pukey AD Replication info.

[Samba] Failure attempting to demote a DC.

[Samba] Pukey AD Replication info.