[Samba] Active Directory Domain Corruption.

[Andrew Bartlett]

On Wed, 2022-06-01 at 10:57 +0100, Rowland Penny via samba wrote:
> On Wed, 2022-06-01 at 21:51 +1200, Andrew Bartlett wrote:
> > On Wed, 2022-06-01 at 10:42 +0100, Rowland Penny via samba wrote:
> > > That is your decision, but, from my point of view, you are doing
> > > 
> > > everything wrong:
> > > 
> > > 
> > > 
> > > You are using an experimental kerberos.
> > > 
> > > You are running Bind9 in a chroot.
> > > 
> > > You are running Bind9 with flatfiles.
> > > 
> > > You have turned off dnsupdate.
> > > 
> > > You are using a DC as a fileserver.
> > > 
> > > 
> > 
> > Yet to be clear, none of these will be changing the contents of
> > sam.ldb. 
> > 
> > Andrew Bartlett
> 
> But the middle three should be.

That is still not the issue here.  The BIND9 may or may not be working,
but it doesn't have access to the partition that a simple 'samba-tool
dbcheck' runs against.  So I think the issues - if there are any real
issues with the DB - are elsewhere, from where I stand.

Andrew,

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions