[Samba] ldapcmp problem

me at tdiehl.org me at tdiehl.org
Wed Jun 16 14:49:26 UTC 2021


Hi Samba Wizards,

I have a domain with (2) 4.12.14 DCs (VDC3 and VDC4). I added a 4.13.9 DC to the
domain (VDC5). When I run ldapcmp I get the following:

samba-tool ldapcmp ldap://VDC3 ldap://VDC5 -Uadministrator --filter=msDS-NcType,serverState,subrefs
Password for [KMG\administrator]:

* Comparing [DOMAIN] context...

* Objects to be compared: 836

Comparing:
'CN=VDC5,OU=DOMAIN CONTROLLERS,DC=KMG,DC=MYDOMAIN,DC=COM' [ldap://VDC3]
'CN=VDC5,OU=DOMAIN CONTROLLERS,DC=KMG,DC=MYDOMAIN,DC=COM' [ldap://VDC5]
     Attributes found only in ldap://VDC5:        SERVERREFERENCEBL

     FAILED

* Result for [DOMAIN]: FAILURE

SUMMARY
---------

Attributes found only in ldap://VDC5:

     SERVERREFERENCEBL

* Comparing [CONFIGURATION] context...

* Objects to be compared: 1621

* Result for [CONFIGURATION]: SUCCESS

* Comparing [SCHEMA] context...

* Objects to be compared: 1550

* Result for [SCHEMA]: SUCCESS

* Comparing [DNSDOMAIN] context...

* Objects to be compared: 660

* Result for [DNSDOMAIN]: SUCCESS

* Comparing [DNSFOREST] context...

* Objects to be compared: 34

* Result for [DNSFOREST]: SUCCESS
ERROR: Compare failed: -1

If I run the ldapcmp from the new DC I get the following:
samba-tool ldapcmp ldap://VDC5 ldap://VDC3 -Uadministrator --filter=msDS-NcType,serverState,subrefs
Password for [KMG\administrator]:

* Comparing [DOMAIN] context...

* Objects to be compared: 836
ERROR(<class 'KeyError'>): uncaught exception - 'serverReferenceBL'
   File "/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/__init__.py", line 186, in _run
     return self.run(*args, **kwargs)
   File "/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/ldapcmp.py", line 957, in run
     if b1.diff(b2):
   File "/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/ldapcmp.py", line 781, in diff
     if object1 == object2:
   File "/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/ldapcmp.py", line 549, in __eq__
     return self.cmp_attrs(other)
   File "/usr/local/samba/lib64/python3.6/site-packages/samba/netcmd/ldapcmp.py", line 590, in cmp_attrs
     if isinstance(self.attributes[x], list) and isinstance(other.attributes[x], list):

samba-tool drs showrepl does not show any problems.

How do I troubleshoot/repair this problem? Is this even something to be worried about?

Regards,

-- 
Tom			me at tdiehl.org



More information about the samba mailing list