search for: masteredby

...=uk objectClass: top objectClass: dMD cn: Schema instanceType: 13 whenCreated: 20130420175653.0Z uSNCreated: 8 objectVersion: 47 showInAdvancedViewOnly: TRUE name: Schema objectGUID: xxxxxxxx-yyyy-aaaa-bbbb-cccccccccccc objectCategory: CN=DMD,CN=Schema,CN=Configuration,DC=mydomain,DC=org,DC=uk msDs-masteredBy: CN=NTDS Settings,CN=2DC1,CN=Servers,CN=site1,CN=Sites ,CN=Configuration,DC=mydomain,DC=org,DC=uk msDs-masteredBy: CN=NTDS Settings,CN=1DC1,CN=Servers,CN=site2,CN=Sites,CN=Co nfiguration,DC=mydomain,DC=org,DC=uk msDs-masteredBy: CN=NTDS Settings,CN=2DCG,CN=Servers,CN=site1,CN=Sites,C N=Configura...

...ema > instanceType: 13 > whenCreated: 20130420175653.0Z > uSNCreated: 8 > objectVersion: 47 > showInAdvancedViewOnly: TRUE > name: Schema > objectGUID: xxxxxxxx-yyyy-aaaa-bbbb-cccccccccccc > objectCategory: CN=DMD,CN=Schema,CN=Configuration,DC=mydomain,DC=org,DC=uk > msDs-masteredBy: CN=NTDS Settings,CN=2DC1,CN=Servers,CN=site1,CN=Sites > ,CN=Configuration,DC=mydomain,DC=org,DC=uk > msDs-masteredBy: CN=NTDS > Settings,CN=1DC1,CN=Servers,CN=site2,CN=Sites,CN=Co > nfiguration,DC=mydomain,DC=org,DC=uk > msDs-masteredBy: CN=NTDS Settings,CN=2DCG,CN=Servers,CN=sit...

Thanks Rowland. In here, I can see the objects I have created using my schema extensions, but I cannot see the schema classes or attributes themselves; I don't know if that is the problem. I'm not sure if by running ldbedit on sam.ldb, this does not include the contents of CN=Schema,CN=Configuration,DC=mydomain,DC=... or if it does include this part of the AD tree and these items are

...ORIGINATING_USN=3630>;<RMD_VERSION=0>;CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com > In particular, I think it would be quite safe to clean up a dangling > forward link within the same partition in: > - msDS-masteredBy > - masteredBy > - fSMORoleOwner > - msDS-NC-Replica-Locations So, good news :-) That's exactly what we're seeing here. So, all in all, thanks for this valuable information, I'll just go ahead and delete it! MJ

...NFIGURATION]: FAILURE SUMMARY --------- Attributes found only in ldap://genesis: dSASignature serverReference Attributes with different values: msDS-NC-Replica-Locations extraColumns mS-DS-ReplicatesNCReason adminPropertyPages appliesTo attributeDisplayNames masteredBy interSiteTopologyGenerator adminContextMenu msDs-masteredBy classDisplayName revision * Comparing [SCHEMA] context... * DN lists have different size: 1789 != 1569 CN=Dns-Zone-Scope,CN=Schema,CN=Configuration,DC=kcs,DC=local Genesis is, I believe, correct. Is there a way t...

...try located in CN=$NETBIOS,OU=Domain Controllers,DC=... o it's RID entry : CN=RID Set,CN=$NETBIOS,OU=Domain Controllers,DC=... o fSMORoleOwner in CN=RID Manager$,CN=System,DC=... and in CN=Infrastructure,DC=... o the user dns-$NETBIOS o fSMORoleOwner msDs-masteredBy msDS-IsDomainFor masteredBy in DC=... entry Any clue to update the server's hostname ? Thanks, Quentin Gibeaux.

On 10/16/2017 08:56 PM, Andrew Bartlett wrote: > Are they breaking anything? Not sure. But in another thread I reported some issues on replication, highwatermark notifications, high COU load, etc. My idea was do try several things to fix this. SO I created a virtualised isolated environment, in which I can try out all kinds of things: - upgrading the DCs to 4.7 (as suggested by you) or -

...und the office from Garming was that we should: - remove more during the demote - clean up links to removed DCs more aggressively (not as likely to result in information loss). In particular, I think it would be quite safe to clean up a dangling forward link within the same partition in: - msDS-masteredBy - masteredBy - fSMORoleOwner - msDS-NC-Replica-Locations > > Finally, for those that have already edited a backend DB, running > > 'samba-tool dbcheck --reindex' on the sam.ldb is a must, to ensure the > > index values are correctly re-calculated. > > I understa...

...<RMD_VERSION=0>;CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com > > > > In particular, I think it would be quite safe to clean up a dangling > > forward link within the same partition in: > > - msDS-masteredBy > > - masteredBy > > - fSMORoleOwner > > - msDS-NC-Replica-Locations > > So, good news :-) That's exactly what we're seeing here. > > So, all in all, thanks for this valuable information, I'll just go ahead > and delete it! That should be fine....

...y in ldap://genesis: > > ? ? dSASignature > ? ? serverReference > > Attributes with different values: > > ? ? msDS-NC-Replica-Locations > ? ? extraColumns > ? ? mS-DS-ReplicatesNCReason > ? ? adminPropertyPages > ? ? appliesTo > ? ? attributeDisplayNames > ? ? masteredBy > ? ? interSiteTopologyGenerator > ? ? adminContextMenu > ? ? msDs-masteredBy > ? ? classDisplayName > ? ? revision > > * Comparing [SCHEMA] context... > > * DN lists have different size: 1789 != 1569 > CN=Dns-Zone-Scope,CN=Schema,CN=Configuration,DC=kcs,DC=local >...

OK, tried that. Kicked myself for not trying earlier... but it didn't work. In fact, the error has got worse. Now when I try to go from Genesis to Luke I get: sudo samba-tool drs replicate luke genesis DC=kcs,DC=local -Udomainadmin . . ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (1359, 'WERR_INTERNAL_ERROR')