search for: supplimentalcredential

Hi Andrew, Thanks for chiming in! On 10/14/2017 12:16 PM, Andrew Bartlett via samba wrote: > We are carefully following the reports here, but we do expect > replication should be much more stable with Samba 4.7. OK, that's interesting, because I actually wanted to upgrade ASAP, but (the few) 4.7-upgrade experiences that have been posted, are mostly about replication issues after

...ce, it doesn't seem quite > related to group memberships. > I agree, we need more logs here. Turn up the log level and see what the error causing that final error is.   However, take care not to publish confidential details like staff names and sensitive attributes like unicodePwd or supplimentalCredentials to a public mailing list. Running 'samba-tool drs clone-dc-database' against one of the DCs would be very instructive. This does the same thing as a fresh join, but without adding any DC objects. The dbcheck errors you mention are interesting. Backlinks are only implicitly transferre...

...n an existing domain by running: samba-tool drs replicate clone-dc-database I do realise that some of the reported issues happen after the upgrade. This is a worry, but I think represents latent DB issues. Finally, while taking care for user confidentiality (staff/student names, unicodePwd and supplimentalCredential values etc) we do need to see logs, typically less than the last 100 lines, for failures at a higher log level (keep turning it up to until meaningful info appears). We can't really guess very much from errors like this from another user in another thread:    [2017/09/29 10:26:15.502219,  0]...

...ce, it doesn't seem > quite related to group memberships. > I agree, we need more logs here. Turn up the log level and see what the error causing that final error is.   However, take care not to publish confidential details like staff names and sensitive attributes like unicodePwd or supplimentalCredentials to a public mailing list. Running 'samba-tool drs clone-dc-database' against one of the DCs would be very instructive. This does the same thing as a fresh join, but without adding any DC objects. The dbcheck errors you mention are interesting. Backlinks are only implicitly transferre...

Hallo, we have 5 ADDCs. All of them did run with sernet-samba 4.6.7. I updated 4 of them to sernet-samba 4.7.0, one after the other, checked replication, everything seemed to be ok. One day later a colleague wanted to delete a lot of users with a powershell-script and since then the replication doesnt work anymore. (Im sure the script is not the problem, but it seemes like it triggered something)