similar to: "incorrect GUID component for member" ... cannot delete member

On Tue, 2016-10-25 at 11:17 -0400, Adam Tauno Williams via samba wrote: > I have defunct user's in groups in my domain groups - but it appears > that I cannot remove them.  This membership is reported by "samba- > tool > dbcheck" but are not fixed even if "-fix" is specified. > > > === ldbmodify === > > [root at larkin27 ~]# ldbmodify -H

I have updated one of my S4 DCs to 4.5.5, somewhat excited about the line in the ChangeLog * Bug #12600 - dbcheck does not find or fix dangling links on live objects Do I misunderstand the scope of this bug? # samba-tool dbcheck --cross-ncs --fix --reset-well-known-acls ... ERROR: no target object found for GUID component for member in object CN=Domain Users,CN=Users,XXXXX -

On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote: > You seem to be missing two FSMO roles: > > > DomainDnsZonesMasterRole > > > ForestDnsZonesMasterRole > > > Just what version of Samba are you using ? > > My Samba 4.5.2 domain also appears to be missing these roles. > > Can I simply seize these roles? > > [root at larkin27 ~]#

> > Initially, it appears to have worked. ... > > It shows the same on one of the S4 DCs, but the > > DomainDnsZonesMasterRole still shows as "no current owner" on the > > third S4 DC [all Sernet 4.5.2].  Argh. > You could try checking the database on the third DC, 'samba-tool > dbcheck --help' for more info. > You could also try forcing

> You seem to be missing two FSMO roles: > DomainDnsZonesMasterRole > ForestDnsZonesMasterRole > Just what version of Samba are you using ? My Samba 4.5.2 domain also appears to be missing these roles. Can I simply seize these roles? [root at larkin27 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=TEMP2008R2DC,CN=Servers,.. InfrastructureMasterRole owner:

On Mon, 19 Sep 2016 11:57:38 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > > On Mon, 19 Sep 2016 10:42:34 -0400 > > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > >

Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >> On Mon, 19 Sep 2016 11:57:38 -0400 >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >> >>> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>>> On Mon, 19 Sep 2016 10:42:34 -0400

On Mon, 19 Sep 2016 10:42:34 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > > No it shouldn't be replicated, the big hint is > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the DC that holds > > the > > RID master FSMO role, so I supposed the question is,

On 9/19/2016 1:37 PM, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 19:19:08 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: >>> >>> Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >>>> On Mon, 19 Sep 2016 11:57:38 -0400 >>>> Adam

On Sun, 15 Jan 2017 20:14:12 -0500 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Sun, 2017-01-15 at 14:39 -0500, Adam Tauno Williams via samba > wrote: > > Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) > > domain hangs at replication CN=Configuration received 1630 out of > > approximately 1663 objects. > > Only

Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) domain hangs at replication CN=Configuration received 1630 out of approximately 1663 objects.   Only message I can find in the event log on the 2008R2 server is -  Internal event: The local directory service received an exception from a remote procedure call (RPC) connection. Extended error information is not available.  directory

Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to another, all roles transfered except the DNS related ones - those fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS [root at larkin28 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=LARKIN28,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us InfrastructureMasterRole owner: CN=NTDS

On Tue, 13 Dec 2016 08:38:16 -0500 Adam Tauno Williams <awilliam at whitemice.org> wrote: > On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote: > > You seem to be missing two FSMO roles: > > > > DomainDnsZonesMasterRole > > > > ForestDnsZonesMasterRole > > > > Just what version of Samba are you using ? > > > My Samba 4.5.2

On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 10:42:34 -0400 > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > > > No it shouldn't be replicated, the big hint is > > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the

> To see rid pool info run the following from a Windows command prompt. > dcdiag /s:DCNAME /test:ridmanager /v > Replace DCNAME with the dns name of your Domain Controller. I wonder > if OP has exhausted his RID pool. Unlikely but possible. I also see a > similar post on this same issue. > https://lists.samba.org/archive/samba/2016-April/198879.html #### LARKIN26

Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: > On Mon, 19 Sep 2016 11:57:38 -0400 > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > >> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>> On Mon, 19 Sep 2016 10:42:34 -0400 >>> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >>>>

On Mon, 19 Sep 2016 19:19:08 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: > >> On Mon, 19 Sep 2016 11:57:38 -0400 > >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >

On Mon, 19 Sep 2016 09:56:16 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 09:31 -0400, Adam Tauno Williams via samba > wrote: > > Package: sernet-samba-4.2.14-23.el6.x86_64 > > These DCs were very recently upgraded from a prior version. > > [2016/09/19 09:32:55.168161, 0] > >

hi, I have this DC in aws to fulfill the authentication need of our moodle. # samba -V Version 4.17.7-Debian DNS with SAMBA_INTERNAL The replication of the users and groups happens correctly. Some errors in running samba_dnsupdate, but it is ok anyway. When I ran the command samba-tool dbcheck, I got the return below. # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes

On Sun, 2017-01-15 at 14:39 -0500, Adam Tauno Williams via samba wrote: > Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) > domain hangs at replication CN=Configuration received 1630 out of > approximately 1663 objects. > Only message I can find in the event log on the 2008R2 server is -  > Internal event: The local directory service received an exception >