similar to: No objectClass found in replPropertyMetaData

Ok, i'v analyzed this problem.. I think where this is comming from. i did a : samba-tool dbcheck --cross-ncs -v same here 0 error. and thank you Rowland for this one. ldbsearch -H /var/lib/samba/private/sam.ldb -b "OU=TOPFLOOR,OU=RTD,OU=COMPANY,DC=INTERNAL,DC=COMPANY,DC=TLD" -s base replPropertyMetaData --show-binary i didnt look exactly at the outcome but i saw the

On Sun, 2015-11-15 at 20:36 -0600, Matthew Delfino wrote: > Hello Colleagues and Mentors, > > I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 > on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on > Ubuntu 14.04.3, but each of them is running Canonical's pre-compiled > Samba package, v4.1.6. > It appears to me that this initial

On Mon, 2015-11-16 at 07:12 -0600, Matthew Delfino wrote: > On 2015.11.16, at 2:53 AM, Andrew Bartlett <abartlet at samba.org> > wrote: > > > On Sun, 2015-11-15 at 20:36 -0600, Matthew Delfino wrote: > > > Hello Colleagues and Mentors, > > > > > > I'm attempting to join a Samba AD DC that I compiled with samba > > > 4.3.1 > >

Hello Colleagues and Mentors, I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on Ubuntu 14.04.3, but each of them is running Canonical's pre-compiled Samba package, v4.1.6. This already-existing domain has had it's schema updated to include Kerio Connect-specific schema (to support our mail

On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: > If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of your directories reused (/etc/samba, /var/lib/samba...) > > That worked for me as I don't care

An awful response: change tombstoneLifetime : ) When deleting objects they go to recycle bin then to deleted objects then are deleted. This if you have some recycle bin working which is not the case by default I reckon. tombstoneLifetime is the number of days AD has to keep deleted objects before the real deletion. If you use the recycle bin this very same tombstoneLifetime is also used to

On 2015.11.16, at 2:53 AM, Andrew Bartlett <abartlet at samba.org> wrote: > On Sun, 2015-11-15 at 20:36 -0600, Matthew Delfino wrote: >> Hello Colleagues and Mentors, >> >> I'm attempting to join a Samba AD DC that I compiled with samba 4.3.1 >> on Ubuntu 14.04.3 to a group of three AD DCs, also running Samba on >> Ubuntu 14.04.3, but each of them is

On 22/11/15 19:49, Matthew Delfino wrote: > On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: > >> On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: >> >>> If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help

The system described by https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS updates correctly, all systems are 4.2.10-Debian, and we've been able to add a user and a new DC. (Thanks for the help!) Synchronisation between v-ward (the new local DC), and empire isn't entirely working, though. >

> > We found that replPropertyMetaData is uniquie for each user, setting > > it empty "fix the error' but breaks the user object. > > Correct, if you delete replPropertyMetaData in any way, you totally > break replication. > dbcheck should wipe that part of replPropertyMetaData with --fix but it is not implemented. If that attribute does non replicate, there

On 2015.11.23, at 8:32 AM, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > OK, try again, but this time, remove the <fSMORoleOwner> from the end of the command, this will dump the entire AD object, I am sure you will find that there is no 'fSMORoleOwner' attribute. This is your actual problem, why do you not have this FSMO role ? > > You have however found a

I expected that someone had the same problem before. DBchecker module does not provide fix for this. The implication is that the main Samba DC is working fine but does not allow replication with other DCs. They report WERR_DS_DRA_INTERNAL_ERROR in samba-tool dsr showrepl for two two sections: Configuration and the main one that contains the users. Other sections replicate fine. Promoting new DC

On Sat, 2017-05-27 at 03:16 +0200, Karan Blas via samba wrote: > > > We found that replPropertyMetaData is uniquie for each user, setting > > > it empty "fix the error' but breaks the user object. > > > > Correct, if you delete replPropertyMetaData in any way, you totally > > break replication. > > > > dbcheck should wipe that part of

On Fri, 2015-10-09 at 13:30 +0800, Skin wrote: > I had a AD with 4 Win2003 DC. Now I use a samba4 server as a > additional DC. > Samba4 server system version: ubuntu 15.04 > Samba version: samba 4.3.0 > The replication from win2003 DC to samba4 DC was success. But have > some problem from samba4 DC to win2003 DC. I can run > > samba-tool drs showrepl > > without

If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of your directories reused (/etc/samba, /var/lib/samba...) That worked for me as I don't care polluting /usr and others (I use VMs and destroy them without a tear) on Centos 7 when I switched from

I had a AD with 4 Win2003 DC. Now I use a samba4 server as a additional DC. Samba4 server system version: ubuntu 15.04 Samba version: samba 4.3.0 The replication from win2003 DC to samba4 DC was success. But have some problem from samba4 DC to win2003 DC. I can run samba-tool drs showrepl without error. But in log.samba it can found many message like: [2015/10/09 12:53:11.562088, 0]

On 23/11/15 15:51, Matthew Delfino wrote: > > On 2015.11.23, at 8:32 AM, Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>> wrote: >> OK, try again, but this time, remove the <fSMORoleOwner> from the end >> of the command, this will dump the entire AD object, I am sure you >> will find that there is no

Hi, For the unsorted attributeID values errors, can you first try: samba-tool dbcheck --cross-ncs --fix --yes 'fix_replmetadata_unsorted_attid' There's too much going on, and it does look like it might be bailing out. Running it with 'fix_replmetadata_unsorted_attid' should fix those first errors, then it will probably be easier to figure out what is happening. The

On 2015.11.23, at 3:58 AM, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 23/11/15 00:09, Matthew Delfino wrote: >> >> On 2015.11.22, at 4:43 PM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com <mailto:mdelfino.list.samba at KNOCKinc.com>> wrote: >> >>> >>> On 2015.11.22, at 2:27 PM, Rowland Penny <rowlandpenny241155

I have 2 DCs running 4.1.12 that have stopped replicating and are producing these error messages: from dc1: Failed to commit objects: WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE [2014/09/23 10:43:35.530000, 0] ../source4/rpc_server/drsuapi/getncchanges.c:1646(dcesrv_drsuapi_DsGetNCChanges) ../source4/rpc_server/drsuapi/getncchanges.c:1646: DsGetNCChanges 2nd replication on