[Samba] Failure demoting 2008_R2 DC (S4rc5)

[Thomas Simmons]

Hello,

I re-provisioned my domain from internal.testdom.com to testdom.com to see
if using a subdomain may be causing my problem. Now I get the following
error when promoting the Windows 2008R2 machine:

The number of DNS servers registered as authoritative name servers for this
domain could not be determined. Error: The filename, directory name, or
volume label syntax is incorrect.

I also tried using testdom.local and the problem persists. It seems that
anytime I provision the domain as "domain.tld", I get the above error when
promoting the 2008R2 machine. When I provision as "subdomain.domain.tld",
Windows detects one authoritative server for the domain (which is correct).
Thanks for any assistance.


On Tue, Nov 20, 2012 at 9:11 PM, Thomas Simmons <twsnnva at gmail.com> wrote:

> Hello,
>
> We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am
> able to duplicate this issue with both classicupgrade and a new provision
> (both cases using internal DNS). I am able to join a 2008R2 system to the
> domain and promote it to a DC, however I am unable to demote it. The
> problem appears to be that the 2008R2 server fails replicating to the S4
> DC. The specific error that I receive on the Windows server is:
>
> The operation failed because:
>
> Active Directory Domain Services could not transfer the remaining data in
> the directory partition
> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com to
> Active Directory Domain Controller adc1.internal.testdom.com
>
> I receive the following when trying to replicate using samba-tool (adc1=S4
> adc2=2008R2):
>
> [root at ADC1 etc]# samba-tool drs replicate adc2 adc1
> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
>
>  Password for [TESTDOM\Administrator]:
> Replicate from adc1 to adc2 was successful.
> [root at ADC1 etc]# samba-tool drs replicate adc1 adc2
> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
> Password for [TESTDOM\Administrator]:
> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
> drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
>   File
> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py", line
> 334, in run
>     drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle,
> source_dsa_guid, NC, req_options)
>   File
> "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py", line
> 83, in sendDsReplicaSync
>     raise drsException("DsReplicaSync failed %s" % estr)
> [root at ADC1 etc]#
>
> I am seeing a lot of these entries in my samba log:
>
> [2012/11/20 20:57:48,  3]
> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
> msdcs.internal.testdom.com' of type A
> [2012/11/20 20:57:48,  3]
> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
> msdcs.internal.testdom.com' of type A
> [2012/11/20 20:57:48,  3]
> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
> msdcs.internal.testdom.com' of type A
>
> Thank you for any assistance.
>