[Samba] error during DRS repl ADD: No rDN found in replPropertyMetaData

ash-samba at comtek.co.uk ash-samba at comtek.co.uk
Thu May 19 12:58:14 UTC 2016


The system described by 
https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data 
for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS 
updates correctly, all systems are 4.2.10-Debian, and we've been able to 
add a user and a new DC. (Thanks for the help!)

Synchronisation between v-ward (the new local DC), and empire isn't 
entirely working, though.

 > root at v-ward:/home/abc# /usr/bin/samba-tool drs replicate 
v-ward.chester-dc.example.com empire.chester-dc.example.com 
DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com
 > ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - 
drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')
 >   File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 
345, in run
 >     drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle, 
source_dsa_guid, NC, req_options)
 >   File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 
83, in sendDsReplicaSync
 >     raise drsException("DsReplicaSync failed %s" % estr)

Looking in the log file, I see:

 > [2016/05/19 13:41:52.219968,  0] 
../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit)
 >   Failed to apply records: replmd_replicated_apply_add: error during 
DRS repl ADD: No rDN found in replPropertyMetaData for 
DC=DEEL032,DC=chester-dc.example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=chester-dc,example!
 >   : Constraint violation
 > [2016/05/19 13:41:52.223745,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:770(dreplsrv_op_pull_source_apply_changes_trigger)
 >   Failed to commit objects: 
WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE

I've found a similar case ( 
https://lists.samba.org/archive/samba/2014-September/185225.html ), but 
it doesn't seem like there was a good resolution.

We are considering simply deleting the 
DC=DEEL032,DC=chester-dc.example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com 
object. Would this be unwise?

I don't know if this is relevant ( Andrew Bartlett suggested "It is also 
harmless, so I wouldn't worry too much until we can fix up
dbcheck" in a similar case - 
https://lists.samba.org/archive/samba/2014-October/186439.html ), but we 
also the the following when running dbcheck --cross-ncs

 > 0 root at empire:/home/abc[0] samba-tool dbcheck --cross-ncs --fix
 > Checking 18686 objects
 > ERROR: wrong dn[DC=DEELR013,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com] dc='DEELR013' 
name='DEELR013\nDEL:1fa8058d-c987-4518-958d-10352c93c28a' 
new_dn[DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com]
 > Rename DC=DEELR013,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com to 
DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com? [y/N/all/none] y
 > Failed to rename object DC=DEELR013,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com into 
DC=DEELR013\0ADEL:1fa8058d-c987-4518-958d-10352c93c28a,CN=Deleted 
Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com : (64, 
'objectclass: structural objectClass dnsNode is not a valid child class 
for CN=Deleted Objects,DC=DomainDnsZones,DC=chester-dc,DC=example,DC=com')
 > Checked 18686 objects (1 errors)

Can anybody recommend our next course of action?

Thanks



More information about the samba mailing list