thr3ads.net - samba - [Samba] dbcheck gets uncaught exception [Jul 2024]

If this information is useful, please help other people find it:
Share via:

Rowland Penny

2024-Jul-16 20:31 UTC

[Samba] dbcheck gets uncaught exception

On Tue, 16 Jul 2024 21:52:14 +0200
Heiko Robert via samba <samba at lists.samba.org> wrote:
> Dear samba experts,
> 
> I run a samba-ad (Version 4.15.13-Ubuntu) for a small organisation
> since several years without issues so far (originally instanciated by
> a QNAP system, then moved years ago to a separate Ubuntu Server via
> ad replication and then demoting the original ad from qnap)
> 
> Now I realized that there are issues while trying to join a second AD.
> 
> So I tried a `samba-tool dbcheck --cross-ncs` on the main server but 
> just got an uncaught exception on CN=Deleted Objects. Does this mean
> I need to delete these objects manually using tdbtool or what would
> be the best way to fix this?
> hint: the zone 192.168.11 had beed deleted manually via RSAT DNS tool 
> end of last year.
> 
> output from dbcheck command:
> 
> NOTE: old (due to rename or delete) DN string component for 
> lastKnownParent in object 
> DC=35\0ADEL:051e3f6a-94ee-4cd1-be44-07fb811b216a,CN=Deleted 
> Objects,DC=DomainDnsZones,DC=company,DC=intra - 
>
DC=11.168.192.in-addr.arpa,CN=MicrosoftDNS,DC=DomainDnsZones,DC=company,DC=intra
That is a tombstone record, you might be able to remove it, see:

samba-tool domain tombstones expunge --help
> Not fixing old string component
> ERROR(ldb): uncaught exception - ldb_wait from (null) with
> LDB_WAIT_ALL: Operations error (1)
>    File
"/usr/lib/python3/dist-packages/samba/netcmd/__init__.py",
> line 186, in _run
>      return self.run(*args, **kwargs)
>    File "/usr/lib/python3/dist-packages/samba/netcmd/dbcheck.py",
> line 169, in run
>      error_count = chk.check_database(DN=DN, scope=search_scope,
>    File "/usr/lib/python3/dist-packages/samba/dbchecker.py", line
> 255, in check_database
>      error_count += self.check_object(object.dn,
> requested_attrs=attrs) File
> "/usr/lib/python3/dist-packages/samba/dbchecker.py", line 2310,
in
> check_object res = self.samdb.search(base=dn, scope=ldb.SCOPE_BASE,
> 
> 
> Before you ask: Yes I have backups but only for 1 month and I guess
> the inconsistency may exist since years or at least months but nobody
> realized.
> 
> Since there are only a view entries in the DNS partition: would it be
> an option to recreate / replace just the DNS database 
> ('DC=DOMAINDNSZONES,DC=COMPANY,DC=INTRA.ldb')?
Do not remove the existing database, well not unless you want to
recreate your domain.

The thing I am worried about is where it says above 'view entries', I
do hope that is very bad English and that you are not somehow using
'views'. If it should be 'few entries', then again that
doesn't sound
quite right, there should be quite a lot of 'A' records etc in there.

Rowland

Heiko Robert

2024-Jul-16 22:57 UTC

head link

[Samba] dbcheck gets uncaught exception

Thanks Rowland,
> The thing I am worried about is where it says above 'view entries',
I
> do hope that is very bad English 
you're absolutely right - my bad. s/view/few/
that's what happens when you constantly switch between english and 
german and then write emails late at night ...

Am 16.07.2024 um 22:31 schrieb Rowland Penny via samba:> That is a tombstone record, you might be able to remove it, see:
> 
> samba-tool domain tombstones expunge --help
I didn't know about the tombstone expunge command yet, so thanks for the 
hint.

samba-tool domain tombstones expunge --tombstone-lifetime=0

removed 10 objects.

Trying to run dbcheck again

samba-tool dbcheck --cross-ncs

now fails due to entries from the previous main dc 
(CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra)
which should no longer exist since nas2 had been demoted via samba-tool 
~2 years ago.

Do you have also a tip how to remove these orphaned entries?

WARNING: no target object found for GUID component for DN value 
msDS-NC-Replica-Locations in object 
CN=c5fb749d-3533-40b2-bf5c-51149a05014f,CN=Partitions,CN=Configuration,DC=company,DC=intra
- 
<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5360>;<RMD_ORIGINATING_USN=3631>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra
WARNING: target DN is deleted for msDS-NC-Replica-Locations in object 
CN=c5fb749d-3533-40b2-bf5c-51149a05014f,CN=Partitions,CN=Configuration,DC=company,DC=intra
- 
<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5360>;<RMD_ORIGINATING_USN=3631>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra
Target GUID points at deleted DN 
'<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5360>;<RMD_ORIGINATING_USN=3631>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra'
Not removing
WARNING: no target object found for GUID component for DN value 
msDS-NC-Replica-Locations in object 
CN=6c729f5e-29bd-417d-8479-890aff81a87b,CN=Partitions,CN=Configuration,DC=company,DC=intra
- 
<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5343>;<RMD_ORIGINATING_USN=3630>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra
WARNING: target DN is deleted for msDS-NC-Replica-Locations in object 
CN=6c729f5e-29bd-417d-8479-890aff81a87b,CN=Partitions,CN=Configuration,DC=company,DC=intra
- 
<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5343>;<RMD_ORIGINATING_USN=3630>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra
Target GUID points at deleted DN 
'<GUID=4016b5de-f592-40a0-93a2-2b899c5faf3a>;<RMD_ADDTIME=130893352390000000>;<RMD_CHANGETIME=130893352390000000>;<RMD_FLAGS=0>;<RMD_INVOCID=02e02fd7-f74c-42c9-80d5-fe8a2db3187c>;<RMD_LOCAL_USN=5343>;<RMD_ORIGINATING_USN=3630>;<RMD_VERSION=0>;CN=NTDS
Settings,CN=NAS2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=company,DC=intra'
Not removing
ERROR(ldb): uncaught exception - ldb_wait from (null) with LDB_WAIT_ALL: 
Operations error (1)
   File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py",
line
186, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python3/dist-packages/samba/netcmd/dbcheck.py", line
169, in run
     error_count = chk.check_database(DN=DN, scope=search_scope,
   File "/usr/lib/python3/dist-packages/samba/dbchecker.py", line 255,
in check_database
     error_count += self.check_object(object.dn, requested_attrs=attrs)
   File "/usr/lib/python3/dist-packages/samba/dbchecker.py", line
2310,
in check_object
     res = self.samdb.search(base=dn, scope=ldb.SCOPE_BASE,

samba - Jul 2024 - dbcheck gets uncaught exception

[Samba] dbcheck gets uncaught exception

[Samba] dbcheck gets uncaught exception