[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck

[Rowland Penny]

On 16/10/14 12:21, L.P.H. van Belle wrote:
> yes..
>
> the attibute "whenCreated" is not synced ( correctly)
> there is a bug report of this.
>
> you can use this script: ( original created by Mourit Jan of the samba list )
>
> used on debian/ubuntu
>
>
> #!/bin/sh
>
> ## the email adress to report to.
> SETMAILREPORT=your at emaildomain.tld
>
> ## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles )
> SETDCFSMO="dc1"
> ## Second DC ( hostname or ipadres more then 2 DC's, separated by space )
> SETOTHERDCS="dc2"
>
> SETSAMBATOOLS=`which samba-tool`
> SETREMOVELOG=yes
>
> for x in $SETOTHERDCS ; do
>      $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO ldap://$SETO                                                                                                                                THERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_checkdb
> done
>
> if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
>     cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE ldapcmp between $SETDCFSMO                                                                                                                                 and $SETOTHERDCS" $SETMAILREPORT
> fi
>
> if [ $SETREMOVELOG = yes ]; then
>      rm /tmp/samba_ldapcmp_checkdb
> fi
>   
>
>> -----Oorspronkelijk bericht-----
>> Van: aoster at novanetwork.de
>> [mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>> Verzonden: donderdag 16 oktober 2014 11:08
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] Continuous Normalisation error for
>> attribute whenCreated when performing dbcheck
>>
>> Hi all,
>>
>> since the migration of our old Win2k domain to Samba4 some years ago
>> I get a lot of errors like the following when doing a
>> "samba-tool dbcheck --cross-ncs --fix" :
>>
>>
>> ERROR: Normalisation error for attribute whenCreated in
>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com
>> value '19700101000000.0Z' should be '16010101000000.0Z'
>> Fix normalisation for whenCreated from
>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>> Normalised attribute whenCreated
>>
>>
>> This repeats 1000+ times for many different entries.
>>
>> The samba-tool unfortunately does not fix the issue because
>> when I start
>> it a second time it will complain again, this time with values switched
>> around:
>>
>> value '16010101000000.0Z' should be '19700101000000.0Z'
>>
>>
>> Does anyone have an idea how to fix this ?
>>
>> Thank you very much for your kind help.
>>
>> best regards
>>
>> Andreas
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
Hi Louis, I have had a look at the script you posted (after I put it 
back together, it arrived here a bit disjointed ;-) )

Just a few comments:

This line:

$SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO 
ldap://$SETOTHERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_check

Shouldn't '$SETOTHERDCS'  be '$x' ?

If you have more than two DC's, shouldn't the redirection sign '>' 
before '$SETOTHERDCS ' actually be two i.e. '>>' ?

I take it that the idea is to get cron to run it, as & when.

finally, I had to rewrite the script slightly, sending the result by the 
'mail' program wouldn't work for me, so I ended up using 'ssmtp'

Rowland