I deleted DC2 from Active Directory Sites and Service.
I checked each resolv.conf and put as first nameserver himself.
I rejoin DC2 to domain and
Dc1 replica on Dc3
Dc1 replica on Dc2 (WERR_GEN_FAILURE)
Dc2 replica on Dc1
Dc2 replica on Dc3 (WERR_DS_DRA_ACCESS_DENIED)
Dc3 replica on Dc1 ONLY
Dc3 have FSMO role, i could transfer FSMO role to another DC, demote DC3 and
rejoin: these steps could solve the problem ??
Any suggestions is appreciated
[root at dc1 ~]# samba-tool drs showrepl
Default-First-Site-Name\DC1
DSA Options: 0x00000001
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
DSA invocationId: 834770f4-c5a7-48c7-bc77-66e2cf37e557
==== INBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:08 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:08 2022 CET
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
Last attempt @ Tue Nov 22 17:13:08 2022 CET failed, result 31
(WERR_GEN_FAILURE)
5 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:09 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:09 2022 CET
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
Last attempt @ Tue Nov 22 17:13:09 2022 CET failed, result 31
(WERR_GEN_FAILURE)
5 consecutive failure(s).
Last success @ NTTIME(0)
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:09 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:09 2022 CET
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
Last attempt @ Tue Nov 22 17:13:10 2022 CET failed, result 31
(WERR_GEN_FAILURE)
5 consecutive failure(s).
Last success @ NTTIME(0)
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:08 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:08 2022 CET
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
Last attempt @ Tue Nov 22 17:13:09 2022 CET failed, result 31
(WERR_GEN_FAILURE)
5 consecutive failure(s).
Last success @ NTTIME(0)
DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:10 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:10 2022 CET
DC=lxcerruti,DC=com
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
Last attempt @ Tue Nov 22 17:13:11 2022 CET failed, result 31
(WERR_GEN_FAILURE)
5 consecutive failure(s).
Last success @ NTTIME(0)
==== OUTBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 16:50:20 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 16:50:20 2022 CET
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
==== KCC CONNECTION OBJECTS ===
Connection --
Connection name: 73d1a404-06a5-4cae-ad6a-11eec59792b9
Enabled : TRUE
Server DNS name : dc3.lxcerruti.com
Server DN name : CN=NTDS
Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lxcerruti,DC=com
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: e2aa72f5-def7-4bba-924b-4492fcd97bc7
Enabled : TRUE
Server DNS name : dc2.lxcerruti.com
Server DN name : CN=NTDS
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lxcerruti,DC=com
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
--------------------------------------------------------------------------------------------------------------------------------------------
[root at dc2 ~]# samba-tool drs showrepl
Default-First-Site-Name\DC2
DSA Options: 0x00000001
DSA object GUID: 6ca41812-c90c-411a-93bf-34d7df97cb6d
DSA invocationId: 5de08c30-912e-4981-8ab3-a125d0e12dd2
==== INBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:13:49 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:49 2022 CET
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:50 2022 CET failed, result 8453
(WERR_DS_DRA_ACCESS_DENIED)
5 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:13:50 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:50 2022 CET failed, result 8453
(WERR_DS_DRA_ACCESS_DENIED)
4 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:13:50 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:50 2022 CET failed, result 8453
(WERR_DS_DRA_ACCESS_DENIED)
4 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:13:49 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:49 2022 CET
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:14:50 2022 CET failed, result 8453
(WERR_DS_DRA_ACCESS_DENIED)
4 consecutive failure(s).
Last success @ Tue Nov 22 17:14:50 2022 CET
DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:13:50 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
DC=lxcerruti,DC=com
Default-First-Site-Name\DC3 via RPC
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
Last attempt @ Tue Nov 22 17:13:50 2022 CET failed, result 8453
(WERR_DS_DRA_ACCESS_DENIED)
4 consecutive failure(s).
Last success @ Tue Nov 22 17:13:50 2022 CET
==== OUTBOUND NEIGHBORS ===
==== KCC CONNECTION OBJECTS ===
Connection --
Connection name: 50348513-ad31-4e7f-a3b3-e263ee3e2ef2
Enabled : TRUE
Server DNS name : dc3.lxcerruti.com
Server DN name : CN=NTDS
Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lxcerruti,DC=com
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: 0c1051cd-f1a8-4581-a264-5d13577cd8b0
Enabled : TRUE
Server DNS name : dc1.lxcerruti.com
Server DN name : CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lxcerruti,DC=com
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
--------------------------------------------------------------------------------------------------------------------------------------------
Default-First-Site-Name\DC3
DSA Options: 0x00000001
DSA object GUID: 25c54e64-45cf-448e-ac3c-2afb1cee086c
DSA invocationId: 30d658d2-cf05-4b2c-8dd0-59930a2186f0
==== INBOUND NEIGHBORS ===
DC=ForestDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:19:49 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:19:49 2022 CET
CN=Schema,CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:19:49 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:19:49 2022 CET
CN=Configuration,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:19:50 2022 CET failed, result 58
(WERR_BAD_NET_RESP)
417 consecutive failure(s).
Last success @ Mon Nov 21 09:18:59 2022 CET
DC=DomainDnsZones,DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:22:42 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:22:42 2022 CET
DC=lxcerruti,DC=com
Default-First-Site-Name\DC1 via RPC
DSA object GUID: 8ba457e4-815d-4bd3-a748-8b5ddb53fd5f
Last attempt @ Tue Nov 22 17:19:50 2022 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 22 17:19:50 2022 CET
==== OUTBOUND NEIGHBORS ===
==== KCC CONNECTION OBJECTS ===
Connection --
Connection name: 9bb42a7e-c1e6-4876-b0f4-fbb973552b67
Enabled : TRUE
Server DNS name : dc1.lxcerruti.com
Server DN name : CN=NTDS
Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=lxcerruti,DC=com
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
-----Messaggio originale-----
Da: samba <samba-bounces at lists.samba.org> Per conto di Rowland Penny
via samba
Inviato: marted? 22 novembre 2022 15:57
A: samba at lists.samba.org
Cc: Rowland Penny <rpenny at samba.org>
Oggetto: Re: [Samba] R: R: R: R: R: R: R: windows 11 22h2
On 22/11/2022 14:49, Byron Wyman via samba wrote:> Although it could easily be a cut-and-paste error, as shown the dc3
> controller is using *dc2* as its first nameserver. I'm not too sure of
> the full consequences of this, but perhaps it is part of the problem.
>
>
Good catch, I missed that. My personal preference would be to 'apt-get purge
network-manager' and then set /etc/network/interfaces as required.
Rowland
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Corrado Ravinetto
Sistemi informativi
corrado.ravinetto at lanificiocerruti.com <mailto:corrado.ravinetto at
lanificiocerruti.com>
T: +39 015 3591283
[Lanificio F.lli CERRUTI]
Lanificio F.lli Cerruti S.p.A.
Via Cernaia 40, 13900 - Biella (BI) Italy
www.lanificiocerruti.com <http://www.lanificiocerruti.com/>
[Twitter] <https://twitter.com/Lan_Cerruti> [Facebook]
<https://www.facebook.com/LanificioCerruti> [Instagram]
<https://www.instagram.com/lanificiocerruti/>
Rispetta l'ambiente, non stampare questa mail se non necessario
Respect the environment, don't print unless necessary
[Unesco]