search for: c01a335

...ecord 2 dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be # record 3 dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net objectGUID: c01a335e-1794-4997-9c7e-553be77fba04 # returned 3 records # 3 entries # 0 referrals host -t CNAME 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net DC1 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net is an alias for dc2.test.net. host -t CNAME 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net...

on DC2 in the log i found: ./source4/dsdb/common/util.c:4807: Failed to find account dn (serverReference) for CN=SAMBA3,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net, parent of DSA with objectGUID c01a335e-1794-4997-9c7e-553be77fba04, sid S-1-5-21- 1608159440-4144762864-1017073214-18962 ../source4/rpc_server/drsuapi/updaterefs.c:374: Refusing DsReplicaUpdateRefs for sid S-1-5-21-1608159440-4144762864-1017073214- 18962 with GUID c01a335e-1794-4997-9c7e-553be77fba04 then i did the following test: s...

...t-Site- >> Name,CN=Sites,CN=Configuration,DC=test,DC=net >> objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be >> >> # record 3 >> dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Default-First-Site- >> Name,CN=Sites,CN=Configuration,DC=test,DC=net >> objectGUID: c01a335e-1794-4997-9c7e-553be77fba04 >> >> # returned 3 records >> # 3 entries >> # 0 referrals >> >> host -t CNAME 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net >> DC1 >> 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net is an alias for >> dc...

...roblem "WERR_DS_DRA_ACCESS_DENIED" - need help debugging on DC2 in the log i found: ./source4/dsdb/common/util.c:4807: Failed to find account dn (serverReference) for CN=SAMBA3,CN=Servers,CN=Default-First-Site- Name,CN=Sites,CN=Configuration,DC=test,DC=net, parent of DSA with objectGUID c01a335e-1794-4997-9c7e-553be77fba04, sid S-1-5-21- 1608159440-4144762864-1017073214-18962 ../source4/rpc_server/drsuapi/updaterefs.c:374: Refusing DsReplicaUpdateRefs for sid S-1-5-21-1608159440-4144762864-1017073214- 18962 with GUID c01a335e-1794-4997-9c7e-553be77fba04 then i did the following test: s...

...,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be > > # record 3 > dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Default-First-Site- > Name,CN=Sites,CN=Configuration,DC=test,DC=net > objectGUID: c01a335e-1794-4997-9c7e-553be77fba04 > > # returned 3 records > # 3 entries > # 0 referrals > > host -t CNAME 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net > DC1 > 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net is an alias for > dc2.test.net. > > host -t CNA...

...=Sites,CN=Configuration,DC=test,DC=net >>> objectGUID: 9ec652b4-146c-4ff1-babe-5abe291325be >>> >>> # record 3 >>> dn: CN=NTDS Settings,CN=SAMBA3,CN=Servers,CN=Default-First-Site- >>> Name,CN=Sites,CN=Configuration,DC=test,DC=net >>> objectGUID: c01a335e-1794-4997-9c7e-553be77fba04 >>> >>> # returned 3 records >>> # 3 entries >>> # 0 referrals >>> >>> host -t CNAME 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test.net >>> DC1 >>> 9e4b0aa7-629b-4535-b1d4-9cb5bf20cb7f._msdcs.test...

Hi, i have the same problem on samba 4.7.3 and 4.7.4. I start with 2 DCs and the sync works fine. After the join of a third DC mostly i get the WERR_DS_DRA_ACCESS_DENIED. I tested it for 10 times. in my case i have: DC1 (with any FSMO Roles) DC2 new join as DC: DC3 After the join, the sync from DC2 to DC3 fails. samba-tool drs replicate dc2 dc1 dc=gvcc,dc=net : OK samba-tool drs replicate