[Samba] error during DRS repl ADD: No rDN found in replPropertyMetaData
ash-samba at comtek.co.uk
ash-samba at comtek.co.uk
Thu May 19 12:58:14 UTC 2016
The system described by
https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data
for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS
updates correctly, all systems are 4.2.10-Debian, and we've been able to
add a user and a new DC. (Thanks for the help!)
Synchronisation between v-ward (the new local DC), and empire isn't
entirely working, though.
> root at v-ward:/home/abc# /usr/bin/samba-tool drs replicate
v-ward.chester-dc.example.com empire.chester-dc.example.com
DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com
> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')
> File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line
345, in run
> drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle,
source_dsa_guid, NC, req_options)
> File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line
83, in sendDsReplicaSync
> raise drsException("DsReplicaSync failed %s" % estr)
Looking in the log file, I see:
> [2016/05/19 13:41:52.219968, 0]
../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit)
> Failed to apply records: replmd_replicated_apply_add: error during
DRS repl ADD: No rDN found in replPropertyMetaData for
DC=DEEL032,DC=chester-dc.example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=chester-dc,example!
> : Constraint violation
> [2016/05/19 13:41:52.223745, 0]
../source4/dsdb/repl/drepl_out_helpers.c:770(dreplsrv_op_pull_source_apply_changes_trigger)
> Failed to commit objects:
WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
I've found a similar case (
https://lists.samba.org/archive/samba/2014-September/185225.html ), but
it doesn't seem like there was a good resolution.
We are considering simply deleting the
DC=DEEL032,DC=chester-dc.example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com
object. Would this be unwise?
I don't know if this is relevant ( Andrew Bartlett suggested "It is also
harmless, so I wouldn't worry too much until we can fix up
dbcheck" in a similar case -
https://lists.samba.org/archive/samba/2014-October/186439.html ), but we
also the the following when running dbcheck --cross-ncs
> 0 root at empire:/home/abc[0] samba-tool dbcheck --cross-ncs --fix
> Checking 18686 objects
> ERROR: wrong dn[DC=DEELR013,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com] dc='DEELR013'
name='DEELR013\nDEL:1fa8058d-c987-4518-958d-10352c93c28a'
new_dn[DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com]
> Rename DC=DEELR013,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com to
DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com? [y/N/all/none] y
> Failed to rename object DC=DEELR013,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com into
DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com : (64,
'objectclass: structural objectClass dnsNode is not a valid child class
for CN=Deleted Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com')
> Checked 18686 objects (1 errors)
Can anybody recommend our next course of action?
Thanks
More information about the samba
mailing list