[Samba] 4th DC Unable to Replicate - WERR_DS_DRA_ACCESS_DENIED
David Minard
david at scem.uws.edu.au
Thu Oct 1 00:24:59 UTC 2015
G'day All,
I've been setting up a new set of DCs, using 4.2.3 and all was
going well until I tried to get a 4th DC going. I'm using bind_DLZ, and
I think this is where I went wrong.
I provisioned the new DC before having set up bind properly (I
forgot to "yum install bind bind-util bind-libs") before hand. The
provision worked okay, except that it told me that it couldn't work out
what version of bind was installed, and that I had to edit the
"/usr/local/samba/private/named.conf" file. Which I have done, and
uncommented out the 9.9 line).
Then, I started bind, and then samba. All seemed well, except that
it has replication errors. So I went through the ownership of files, as
described by the wiki, making changes as appropriate, and compared them
to my other DCs. They now all seemed right. bind and samba restarted.
samba-tool drs showrepl
ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to
samba4-40.samba4.scem.westernsydney.edu.au failed - drsException: DRS
connection to samba4-40.samba4.scem.westernsydney.edu.au failed:
(-1073741772, 'The object name is not found.')
File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/drs.py",
line 39, in drsuapi_connect
(ctx.drsuapi, ctx.drsuapi_handle, ctx.bind_supported_extensions) =
drs_utils.drsuapi_connect(ctx.server, ctx.lp, ctx.creds)
File
"/usr/local/samba/lib64/python2.7/site-packages/samba/drs_utils.py",
line 54, in drsuapi_connect
raise drsException("DRS connection to %s failed: %s" % (server, e))
I have the server name in /etc/hosts. I have resolve.conf pointing to
the other DCs.
If I "samba-tool drs showrepl samba4-40" I get
Default-First-Site-Name\SAMBA4-40
DSA Options: 0x00000001
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
DSA invocationId: acea15ea-f471-42b9-84c3-8dc44bd98da4
==== INBOUND NEIGHBORS ====
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:37 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:37 2015 AEST
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:37 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:37 2015 AEST
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-20 via RPC
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
Last attempt @ Thu Oct 1 10:13:37 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:37 2015 AEST
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:37 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:37 2015 AEST
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:37 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:37 2015 AEST
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-20 via RPC
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
Last attempt @ Thu Oct 1 10:13:38 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:38 2015 AEST
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:36 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:36 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-20 via RPC
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
Last attempt @ Thu Oct 1 10:13:36 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:38 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:38 2015 AEST
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:38 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:38 2015 AEST
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-20 via RPC
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
Last attempt @ Thu Oct 1 10:13:39 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:39 2015 AEST
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:36 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:36 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-20 via RPC
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
Last attempt @ Thu Oct 1 10:13:36 2015 AEST failed, result
8453 (WERR_DS_DRA_ACCESS_DENIED)
205 consecutive failure(s).
Last success @ Thu Oct 1 10:13:36 2015 AEST
==== OUTBOUND NEIGHBORS ====
==== KCC CONNECTION OBJECTS ====
Connection --
Connection name: 0809eed4-d61d-4c7f-89cb-f230311fc7e3
Enabled : TRUE
Server DNS name : samba4-00.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-00,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: 78bb6883-6d6a-4c5c-9d6b-39f256823401
Enabled : TRUE
Server DNS name : samba4-10.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-10,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: c91eece0-11bb-416f-888d-6e87e9439abf
Enabled : TRUE
Server DNS name : samba4-20.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-20,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
On another dc "samba-tool drs showrepl" gives me:
Default-First-Site-Name\SAMBA4-20
DSA Options: 0x00000001
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
DSA invocationId: e5e45b36-50e5-4f56-97d3-11e1cb7f1b22
==== INBOUND NEIGHBORS ====
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:55 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:55 2015 AEST
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:55 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:55 2015 AEST
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:13:55 2015 AEST failed, result 2
(WERR_BADFILE)
208 consecutive failure(s).
Last success @ NTTIME(0)
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:55 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:55 2015 AEST
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:56 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:56 2015 AEST
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:13:56 2015 AEST failed, result 2
(WERR_BADFILE)
208 consecutive failure(s).
Last success @ NTTIME(0)
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:54 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:54 2015 AEST
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:54 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:54 2015 AEST
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:13:54 2015 AEST failed, result 2
(WERR_BADFILE)
208 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:56 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:56 2015 AEST
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:56 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:56 2015 AEST
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:13:57 2015 AEST failed, result 2
(WERR_BADFILE)
208 consecutive failure(s).
Last success @ NTTIME(0)
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ Thu Oct 1 10:13:54 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:54 2015 AEST
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ Thu Oct 1 10:13:54 2015 AEST was successful
0 consecutive failure(s).
Last success @ Thu Oct 1 10:13:54 2015 AEST
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:13:55 2015 AEST failed, result 2
(WERR_BADFILE)
208 consecutive failure(s).
Last success @ NTTIME(0)
==== OUTBOUND NEIGHBORS ====
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:14:58 2015 AEST failed, result 2
(WERR_BADFILE)
12196 consecutive failure(s).
Last success @ NTTIME(0)
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:14:59 2015 AEST failed, result 2
(WERR_BADFILE)
12195 consecutive failure(s).
Last success @ NTTIME(0)
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:14:58 2015 AEST failed, result 2
(WERR_BADFILE)
12197 consecutive failure(s).
Last success @ NTTIME(0)
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:14:59 2015 AEST failed, result 2
(WERR_BADFILE)
12194 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-40 via RPC
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
Last attempt @ Thu Oct 1 10:14:58 2015 AEST failed, result 2
(WERR_BADFILE)
12196 consecutive failure(s).
Last success @ NTTIME(0)
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-00 via RPC
DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
Default-First-Site-Name\SAMBA4-10 via RPC
DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)
==== KCC CONNECTION OBJECTS ====
Connection --
Connection name: 19cae640-3d3a-4c64-83f0-7cb99b8e2303
Enabled : TRUE
Server DNS name : samba4-10.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-10,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: 9648274d-fbcc-4974-8e00-32dedef0482c
Enabled : TRUE
Server DNS name : samba4-00.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-00,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
Connection name: dd40f960-8f12-4d8e-8027-e4284a3e063b
Enabled : TRUE
Server DNS name : samba4-40.samba4.scem.westernsydney.edu.au
Server DN name : CN=NTDS
Settings,CN=SAMBA4-40,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
Which is what I'd expect given that samba4-40 has issues.
So, I thought that I'd try to demote samba4-40 and re-try the domain join.
samb-tool domain demote -U administrator
Using samba4-00.samba4.scem.westernsydney.edu.au as partner server for
the demotion
Password for [SCEM_AD\administrator]:
Deactivating inbound replication
Asking partner server samba4-00.samba4.scem.westernsydney.edu.au to
synchronize from us
Error while demoting, re-enabling inbound replication
ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a
DsReplicaSync for partion
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
- drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
File
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 712, in run
sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid,
str(part), drsuapi.DRSUAPI_DRS_WRIT_REP)
File
"/usr/local/samba/lib64/python2.7/site-packages/samba/drs_utils.py",
line 83, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)
HELP !! I'm now stuck. I've not seen "WERR_DS_DRA_ACCESS_DENIED"
before, and I don't know how to fix it.
I don't know if running the domain join again is a good idea, or if
that will break more stuff....
--
Cheers,
David Minard.
Ph: 0247 360 155
Fax: 0247 360 770
School of Computing, Engineering, and Mathematics
Building Y - Penrith Campus (Kingswood)
Locked bag 1797
Penrith South DC
NSW 1797
[Sometimes waking up just isn't worth the insult of the day to come.]
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the samba
mailing list