search for: repsto

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND and > OUTBOUND entries are coming later on after the ntd...

...neighbors be reflective of the KCC connection > objects? I would expect to find only inbound and outbound connections > for SOLDC1. Maybe I'm completely misinterpreting the intended behavior. the job of the samba_kcc script is to create the ntdsConnection objects. Afterward the repsFrom/repsTo attribute are created in accordance with the ntdsConnection objects (you can force the creation using samba-tool drs replicate although). You can check that the process is asynchronous when you join a new DC, the INBOUND and OUTBOUND entries are coming later on after the ntdsConnection object h...

...mba] showrepl is showing a deleted connexion Hi Jordi, > Solved ! > Thanks for the script. > In my case, it was just too late. > I have just found a ugly but working solution: > From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. > No more trouble with drs showrepl :-) Indeed, samba-tool drs showrepl show in fact the repsfrom/repsto attributes. They should be created / deleted by kcc. However I have seen lingering repsto attributes in the past too and had to ldbedit to cleanup the mess. Ldbdel'...

> > Wasn't aware of this. Thank you for the info. If I was to delete the > incorrect respsFrom/repsTo attributes, wouldn't the KCC just > regenerate them over time once the KCC check and ISTG check kicked in? As long as the topology doesn't change or DCs which are not bridgeheads do not go offline, there should be basically zero additional reps over time. How often they build up over...

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania Envoyé : vendredi 22 janvier 2016 09:35 À : samba at lists.samba.org Objet : Re: [Samba] showrepl is showing a deleted connexio...

...n of my trouble: https://lists.samba.org/archive/samba/2015-December/196844.html KCC does not remove existing outdated kcc objects by itself (or didn't, if it has been changed in more recent versions). I had a chat with Douglas about this a while back. However it should remove your repsfrom/repsto attribute, unless you messed up the thing (I did once). I also had in the past repsfrom/repsto pointing to deleted NTDSDSA entries with the \0ADEL string. Before asking samba_kcc to buildup the connexions, you have to define the sites, put the DC in the correct site, remove the site from de de...

Hi Jordi, > Solved ! > Thanks for the script. > In my case, it was just too late. > I have just found a ugly but working solution: > From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. > No more trouble with drs showrepl :-) Indeed, samba-tool drs showrepl show in fact the repsfrom/repsto attributes. They should be created / deleted by kcc. However I have seen lingering repsto attributes in the past too and had to ldbedit to cleanup the mess. Ldbdel...

On 9/28/2016 1:25 AM, garming at catalyst.net.nz wrote: >> >> Wasn't aware of this. Thank you for the info. If I was to delete the >> incorrect respsFrom/repsTo attributes, wouldn't the KCC just >> regenerate them over time once the KCC check and ISTG check kicked in? > > As long as the topology doesn't change or DCs which are not > bridgeheads do not go offline, there should be basically zero > additional reps over time. How of...

...LDC1). I've > taken quite a few steps to rid the DCs of as many old repsFrom entries > as possible from within the KCC, but based on time delays and use of the > old KCC, this may not be enough in its current state to be equivalent to > a fresh domain. About the cleanup of repsFrom/repsTo, is the cleanup code included in 4.4.5 or only in 4.5? I have not yet found time to test that new version, but at least in 4.4.5, I still have the behavior where leftover repsFrom/repsTo are not automatically deleted. I hope to find time to test 4.5 next week. Cheers, Denis PS : sorry for my...

...556.1.6.18.1;34:1.2.840.113556.1.6.1 8.2;35:1.2.840.113556.1.6.13.3;36:1.2.840.113556.1.6.13.4;37:1.3.6.1.1.1.1;38 :1.3.6.1.1.1.2;39:1.3.6.1.4.1.7165.4.1;40:1.3.6.1.4.1.7165.4.2;41:MY.CU.ST.OM.OID.1;42:MY.CU.ST.OM.OID.2 replUpToDateVector:: [...] repsFrom:: [...] repsFrom:: [...] repsFrom:: [...] repsTo:: [...] repsTo:: [...] repsTo:: [...] distinguishedName: CN=Schema,CN=Configuration,DC=mydomain,DC=org,DC=uk -- "If we knew what it was we were doing, it would not be called research, would it?" - Albert Einstein

....6 seems to work, I wonder about these messages: M?r 05 09:06:21 adc1 samba[4198]: task[dreplsrv][4198]: [2020/03/05 09:06:21.737684, 0] ../../source4/dsdb/repl/drepl_notify.c:353(dreplsrv_notify_check) M?r 05 09:06:21 adc1 samba[4198]: task[dreplsrv][4198]: dreplsrv_notify_check: Failed to load repsTo for DC=ForestDnsZones,DC=arbeitsgruppe,DC=customer,DC=at M?r 05 09:06:26 adc1 samba[4198]: task[dreplsrv][4198]: [2020/03/05 09:06:26.744359, 0] ../../source4/dsdb/common/util.c:3303(dsdb_loadreps) M?r 05 09:06:26 adc1 samba[4198]: task[dreplsrv][4198]: dsdb_loadreps: failed to read partition ob...

...1 > 8.2;35:1.2.840.113556.1.6.13.3;36:1.2.840.113556.1.6.13.4;37:1.3.6.1.1.1.1;38 > :1.3.6.1.1.1.2;39:1.3.6.1.4.1.7165.4.1;40:1.3.6.1.4.1.7165.4.2;41:MY.CU.ST.OM.OID.1;42:MY.CU.ST.OM.OID.2 > replUpToDateVector:: [...] > repsFrom:: [...] > repsFrom:: [...] > repsFrom:: [...] > repsTo:: [...] > repsTo:: [...] > repsTo:: [...] > distinguishedName: CN=Schema,CN=Configuration,DC=mydomain,DC=org,DC=uk > > -- > "If we knew what it was we were doing, it would not be called > research, would it?" > - Albert Einstein I have now remembered somet...

On 9/22/2016 6:31 PM, Garming Sam wrote: > On 23/09/16 00:59, lingpanda101 at gmail.com wrote: >> For clarification I'll add a few things. >> >> I initially deleted all the NTDS site links for each site and allowed >> the new KCC to create them. However it did not create them I believe >> correctly. By that I mean it defined what appeared to be a bridgehead

Thanks Rowland. In here, I can see the objects I have created using my schema extensions, but I cannot see the schema classes or attributes themselves; I don't know if that is the problem. I'm not sure if by running ldbedit on sam.ldb, this does not include the contents of CN=Schema,CN=Configuration,DC=mydomain,DC=... or if it does include this part of the AD tree and these items are

...23 +74453,32 @@ objectClass: dMD objectGUID: 7a51a45f-0110-445f-977a-6e9dbe745abd objectVersion: 30 -prefixMap:: CAAAAIIAAAA0EwsAKoZIhvcUAQS2WGZLEwsAKoZIhvcUAQW2WD5lEwwAKoZIhvcUAQ - S2WGaDaBMMACqGSIb3FAEEtlhmgYITDAAqhkiG9xQBBbZYPoESFAwAKoZIhvcUAQW2WD6DpBUKACq - GSIb3FAEGFAGqFQoAKoZIhvcUAQYUAg== -repsTo:: AQAAAAAAAAAUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AAAADwAAAAQAAAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA - AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKX3QKCbVzp - Om7VKH4rY8V0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...

Dear list, in this corona crisis a delivery of a AD to a location abroad takes longer than I expected. I demoted the AD which is in delivery with samba-tool domain demote --remove-other-dead-server=ADDC3 If I know trigger a samba-tool drs showrepl I still see him in the list: CN=Configuration,DC=example,DC=com ??? NTDS DN: CN=NTDS

Hello,     I'm never certain if it's best to stop samba when running a fix or check on the DB. Is there a rule of thumb for this? In a multi DC environment is it best to run on one DC and have it replicate the fixes? I never find this to be the case BTW or I may not be waiting long enough. Thanks. -- -- James

...;> >> M?r 05 09:06:21 adc1 samba[4198]: task[dreplsrv][4198]: [2020/03/05 >> 09:06:21.737684, 0] >> ../../source4/dsdb/repl/drepl_notify.c:353(dreplsrv_notify_check) >> M?r 05 09:06:21 adc1 samba[4198]: task[dreplsrv][4198]: >> dreplsrv_notify_check: Failed to load repsTo for >> DC=ForestDnsZones,DC=arbeitsgruppe,DC=customer,DC=at > it only seemed to work, received a call and stopped ADC1 (the 4.11.6 DC) > now. > > downgrade or fix ;-) ? > > > This hit me yesterday, restart the DC, check with 'ps ax' and I think you will find tha...

Thanks Andrew. No - it was my fault for including an easily-solved side query in the same email as the main query.. :) I haven't solved the original issue, which is that 'samba-tool drs showrepl' runs on two of my DCs but not on the third. I don't know if anything else also doesn't work, e.g. some aspect of replication I haven't observed yet - but the only problem I can

...artition [2014/02/05 15:28:52.384792, 10, pid=4168, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ldb_trace_request: SEARCH dn: DC=DomainDnsZones,DC=ontdekkingsreis,DC=andolan scope: base expr: (|(objectClass=*)(distinguishedName=*)) attr: repsTo control: <NONE> [2014/02/05 15:28:52.385136, 10, pid=4168, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug) ldb: ldb_trace_request: (resolve_oids)->search Met vriendelijke groet, Peter Gerritsen Engineer AndoBurg BV Voorstraat 31 3931 HB Woude...