search for: 9e4b0aa7

...any DC: (DC1 and DC2 are the first and second DCs, SAMBA3 was added at last. ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross-ncs objectguid # record 1 dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f # record 2 dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be # record 3 dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configur...

...last. >> >> ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross- >> ncs >> objectguid >> # record 1 >> dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- >> Name,CN=Sites,CN=Configuration,DC=test,DC=net >> objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f >> >> # record 2 >> dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- >> Name,CN=Sites,CN=Configuration,DC=test,DC=net >> objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be >> >> # record 3 >> dn: CN=NTDS Settings...

...econd DCs, SAMBA3 was added at last. > > ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross- > ncs > objectguid > # record 1 > dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f > > # record 2 > dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be > > # record 3 > dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Defau...

...econd DCs, SAMBA3 was added at last. > > ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross- > ncs > objectguid > # record 1 > dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f > > # record 2 > dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be > > # record 3 > dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Defau...

...ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross- >>> ncs >>> objectguid >>> # record 1 >>> dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- >>> Name,CN=Sites,CN=Configuration,DC=test,DC=net >>> objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f >>> >>> # record 2 >>> dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- >>> Name,CN=Sites,CN=Configuration,DC=test,DC=net >>> objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be >>> >>> # record 3 &...

...d > second DCs, SAMBA3 was added at last. > > ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross- > ncs objectguid # record 1 > dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f > > # record 2 > dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be > > # record 3 > dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Defau...

Hi, i have the same problem on samba 4.7.3 and 4.7.4. I start with 2 DCs and the sync works fine. After the join of a third DC mostly i get the WERR_DS_DRA_ACCESS_DENIED. I tested it for 10 times. in my case i have: DC1 (with any FSMO Roles) DC2 new join as DC: DC3 After the join, the sync from DC2 to DC3 fails. samba-tool drs replicate dc2 dc1 dc=gvcc,dc=net : OK samba-tool drs replicate