similar to: Stalled Replication & "DsGetNCChanges 2nd replication"

Attempting to debug issues with replication I ldapcmd finds differences with the case of the "DC" attribute? Is this normal? LARKIN28 is Samba4 4.5.4, while WINDC1 is Windows 2008R2. [root at larkin28 samba]# samba-tool ldapcmp ldap://larkin28.micore.us ldap://windc1.micore.us -Uadministrator dnsdomain Password for [BACKBONE\administrator]: * Comparing [DNSDOMAIN] context... *

Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to > another, all roles transfered except the DNS related ones - those > fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS > [root at larkin28 ~]# samba-tool fsmo transfer --role=forestdns > ERROR: Failed to delete role 'forestdns': LDAP error

On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 10:42:34 -0400 > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > > > No it shouldn't be replicated, the big hint is > > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the

Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to another, all roles transfered except the DNS related ones - those fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS [root at larkin28 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=LARKIN28,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us InfrastructureMasterRole owner: CN=NTDS

> > Initially, it appears to have worked. ... > > It shows the same on one of the S4 DCs, but the > > DomainDnsZonesMasterRole still shows as "no current owner" on the > > third S4 DC [all Sernet 4.5.2].  Argh. > You could try checking the database on the third DC, 'samba-tool > dbcheck --help' for more info. > You could also try forcing

Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: > On Mon, 19 Sep 2016 11:57:38 -0400 > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > >> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>> On Mon, 19 Sep 2016 10:42:34 -0400 >>> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >>>>

> To see rid pool info run the following from a Windows command prompt. > dcdiag /s:DCNAME /test:ridmanager /v > Replace DCNAME with the dns name of your Domain Controller. I wonder > if OP has exhausted his RID pool. Unlikely but possible. I also see a > similar post on this same issue. > https://lists.samba.org/archive/samba/2016-April/198879.html #### LARKIN26

On Mon, 19 Sep 2016 19:19:08 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: > >> On Mon, 19 Sep 2016 11:57:38 -0400 > >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >

Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: > > > Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >> On Mon, 19 Sep 2016 11:57:38 -0400 >> Adam Tauno Williams via samba <samba at lists.samba.org> wrote: >> >>> On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: >>>> On Mon, 19 Sep 2016 10:42:34 -0400

On Mon, 19 Sep 2016 11:57:38 -0400 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote: > > On Mon, 19 Sep 2016 10:42:34 -0400 > > Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > > > > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote: > >

On 9/19/2016 1:37 PM, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 19:19:08 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: >>> >>> Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >>>> On Mon, 19 Sep 2016 11:57:38 -0400 >>>> Adam

Quoting Adam Tauno Williams <awilliam at whitemice.org>: >>>> It should work, it sounds like a mis-configuration somewhere, can you >>>> post the smb.conf, /etc/nsswitch.conf, /etc/resolv.conf and >>>> /etc/krb5.conf from the member server. >>> "wbinfo -u" lists 415 lines >>> "getent passwd" returns 93 lines

On Sun, 15 Jan 2017 20:14:12 -0500 Adam Tauno Williams via samba <samba at lists.samba.org> wrote: > On Sun, 2017-01-15 at 14:39 -0500, Adam Tauno Williams via samba > wrote: > > Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) > > domain hangs at replication CN=Configuration received 1630 out of > > approximately 1663 objects. > > Only

On Sun, 2017-01-15 at 14:39 -0500, Adam Tauno Williams via samba wrote: > Adding a Windows2008RC to an SerNET S4 4.5.3 (forest level 2008R2) > domain hangs at replication CN=Configuration received 1630 out of > approximately 1663 objects. > Only message I can find in the event log on the 2008R2 server is -  > Internal event: The local directory service received an exception >

Quoting Rowland Penny via samba <samba at lists.samba.org>: >> samba-tool's dbcheck finds only two errors in cn=Configuration, but it >> does not repair them.  These appear to be references to an original, >> long since demoted, DC.  But these values appear in neither the >> results of an ldbsearch or via ADSI edit. > Have a look at this bug report: >

On Mon, 16 Jan 2017 14:03:37 -0500 Adam Tauno Williams <awilliam at whitemice.org> wrote: > Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > > Quoting Rowland Penny via samba <samba at lists.samba.org>: > >>> samba-tool's dbcheck finds only two errors in cn=Configuration, > >>> but it does not repair them.  These appear to

On Mon, 2016-09-19 at 09:31 -0400, Adam Tauno Williams via samba wrote: > Package: sernet-samba-4.2.14-23.el6.x86_64 > > These DCs were very recently upgraded from a prior version. > > [2016/09/19 09:32:55.168161,  0] > ../source4/libcli/smb2/signing.c:116(smb2_check_signature) >   Bad SMB2 signature for message of size 202 > [2016/09/19 09:32:55.168511,  0]

On Mon, 2017-01-16 at 14:03 -0500, Adam Tauno Williams via samba wrote: > Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > > Quoting Rowland Penny via samba <samba at lists.samba.org>: > > > > samba-tool's dbcheck finds only two errors in cn=Configuration, > > > > but it > > > > does not repair them.  These appear to

Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > Quoting Rowland Penny via samba <samba at lists.samba.org>: >>> samba-tool's dbcheck finds only two errors in cn=Configuration, but it >>> does not repair them.  These appear to be references to an original, >>> long since demoted, DC.  But these values appear in neither the

On Mon, 2016-09-19 at 23:46 -0500, Andrew Bartlett via samba wrote: > On Mon, 2016-09-19 at 09:31 -0400, Adam Tauno Williams via samba > wrote: > > > > Package: sernet-samba-4.2.14-23.el6.x86_64 > > > > These DCs were very recently upgraded from a prior version. > > > > [2016/09/19 09:32:55.168161,  0] > >