[Samba] drs failed on version 4.1.0rc2: RID Manager failed RID allocation - WERR_BADFILE

Joris joris.willems at gmail.com
Mon Aug 12 05:11:23 MDT 2013


I installed samba as an AD as described on the wiki and set up replication
as described on the wiki.
I checked and users are not replicated.
I am getting the following messages

Primary server (SambaCK):

LOG:
 Copyright Andrew Tridgell and the Samba Team 1992-2013
[2013/08/12 08:48:46.359901,  0]
../source4/smbd/server.c:492(binary_smbd_main)
  samba: using 'standard' process model
[2013/08/12 08:48:46.582463,  0]
../source4/lib/tls/tlscert.c:70(tls_cert_generate)
  Attempting to autogenerate TLS self-signed keys for https for hostname '
SAMBACK.ec.sbat.be'
[2013/08/12 08:48:47.078082,  0]
../source4/lib/tls/tlscert.c:166(tls_cert_generate)
  TLS self-signed keys generated OK
[2013/08/12 11:25:55.632341,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/sbin/rndc: rndc: connect failed: 127.0.0.1#953: connection refused

root at SambaCK:/usr/src/samba-4.1.0rc2# samba-tool drs showrepl

Default-First-Site-Name\SAMBACK
DSA Options: 0x00000001
DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
DSA invocationId: b1d14df0-427b-43aa-8cc5-22a6f3ead48d

==== INBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:02 2013 CEST failed, result
2 (WERR_BADFILE)
                15 consecutive failure(s).
                Last success @ NTTIME(0)

==== OUTBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Configuration,DC=ec,DC=sbat,DC=be
        1016\SAMBA1016 via RPC
                DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
                Last attempt @ Mon Aug 12 12:44:29 2013 CEST failed, result
2 (WERR_BADFILE)
                905 consecutive failure(s).
                Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection --
        Connection name: 399cadb6-df56-4b6b-8841-7a59f070a01a
        Enabled        : TRUE
        Server DNS name : SAMBA1016.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBA1016,CN=Servers,CN=1016,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!




Secondary server ( samba1016 ):

root at samba1016:~# samba-tool drs showrepl
1016\SAMBA1016
DSA Options: 0x00000001
DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
DSA invocationId: 0219cdda-0ded-47c4-abf7-2d9743b20669

==== INBOUND NEIGHBORS ====

DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:01 2013 CEST

CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:09 2013 CEST

DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

==== OUTBOUND NEIGHBORS ====

==== KCC CONNECTION OBJECTS ====

Connection --
        Connection name: f3c64acd-ab88-46b7-a7e7-214073e27413
        Enabled        : TRUE
        Server DNS name : SambaCK.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBACK,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!
root at samba1016:~# cd /usr/src/samba-4.1.0rc2/
root at samba1016:/usr/src/samba-4.1.0rc2# samba-tool drs showrepl
1016\SAMBA1016
DSA Options: 0x00000001
DSA object GUID: 652575fc-ccf4-4d1e-9379-70c817e0cb75
DSA invocationId: 0219cdda-0ded-47c4-abf7-2d9743b20669

==== INBOUND NEIGHBORS ====

DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

DC=DomainDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

CN=Schema,CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:01 2013 CEST

CN=Configuration,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                14 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:09 2013 CEST

DC=ForestDnsZones,DC=ec,DC=sbat,DC=be
        Default-First-Site-Name\SAMBACK via RPC
                DSA object GUID: 7040f3b8-017f-4083-9e9d-4476d02f6993
                Last attempt @ Mon Aug 12 12:44:21 2013 CEST failed, result
2 (WERR_BADFILE)
                13 consecutive failure(s).
                Last success @ Mon Aug 12 11:26:11 2013 CEST

==== OUTBOUND NEIGHBORS ====

==== KCC CONNECTION OBJECTS ====

Connection --
        Connection name: f3c64acd-ab88-46b7-a7e7-214073e27413
        Enabled        : TRUE
        Server DNS name : SambaCK.ec.sbat.be
        Server DN name  : CN=NTDS
Settings,CN=SAMBACK,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ec,DC=sbat,DC=be
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!


LOG:
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:09.957541,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.118268,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.275537,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.431771,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.585786,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.734509,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:10.891021,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:49:21.801609,  0]
../source4/dsdb/repl/drepl_ridalloc.c:43(drepl_new_rid_pool_callback)
  ../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
allocation - WERR_BADFILE - extended_ret[0x0]
[2013/08/12 11:54:21.816265,  0]
../source4/dsdb/repl/drepl_ridalloc.c:43(drepl_new_rid_pool_callback)
  ../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
allocation - WERR_BADFILE - extended_ret[0x0]
[2013/08/12 11:59:07.914150,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.080362,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.250600,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[2013/08/12 11:59:08.458947,  0]
../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
  /usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure

I thought it might be useful to report my experience as it is in testing.
Any suggestions to produce better output are welcome.

Best regards,
Joris Willems


More information about the samba mailing list