[Samba] Samba 4.16 replication of Windows AD 2019

Kasandra Padisha kasandrapadisha at aol.com
Thu Jun 8 15:22:26 UTC 2023


Hi

I am trying to join a Samba 4.16 to an AD 2019 but i am getting a 8453 
error. All the information is as follows

OS: Debian 11
Samba:  4.16.10
AD: Windows 2019 Std

I execute the command

samba-tool domain join mydomain.com.co RODC -U"mydomain/repdomain" 
--password='XXXX' --site=nwsite

And it works Ok for a while, but at the end it fails with a permission 
error (looks like it)

ERROR(runtime): uncaught exception - (8453, 'WERR_DS_DRA_ACCESS_DENIED')

I have already follow the instructions, without success,  from MS howto in

https://learn.microsoft.com/en-US/troubleshoot/windows-server/identity/replication-error-8453

An then I am stuck and I need some clues.

Thanks in advance

----------------------- Here the whole command output 
-------------------------

root at replica-aws:~# samba-tool domain join mydomain.com.co RODC 
-U"mydomain/repdomain" --password='xxxxxx' --site=aws
WARNING: Using password on command line is insecure. Please install the 
setproctitle python module.
INFO 2023-06-08 09:43:13,439 pid:3334782 
/usr/lib/python3/dist-packages/samba/join.py #105: Finding a writeable 
DC for domain 'mydomain.com.co'
INFO 2023-06-08 09:43:21,611 pid:3334782 
/usr/lib/python3/dist-packages/samba/join.py #107: Found DC 
GUEPARDO.mydomain.com.co
INFO 2023-06-08 09:43:24,165 pid:3334782 
/usr/lib/python3/dist-packages/samba/join.py #1508: workgroup is mydomain
INFO 2023-06-08 09:43:24,165 pid:3334782 
/usr/lib/python3/dist-packages/samba/join.py #1511: realm is mydomain.com.co
Adding CN=REPLICA-AWS,OU=Domain Controllers,DC=mydomain,DC=com,DC=co
Adding CN=krbtgt_REPLICA-AWS,CN=Users,DC=mydomain,DC=com,DC=co
Got krbtgt_name=krbtgt_29903
Renaming CN=krbtgt_REPLICA-AWS,CN=Users,DC=mydomain,DC=com,DC=co to 
CN=krbtgt_29903,CN=Users,DC=mydomain,DC=com,DC=co
Adding 
CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
Adding CN=NTDS 
Settings,CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
Adding CN=RODC Connection (FRS),CN=NTDS 
Settings,CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
Adding SPNs to CN=REPLICA-AWS,OU=Domain Controllers,DC=mydomain,DC=com,DC=co
Setting account password for REPLICA-AWS$
Enabling account
Calling bare provision
INFO 2023-06-08 09:43:29,620 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2108: 
Looking up IPv4 addresses
INFO 2023-06-08 09:43:29,620 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2125: 
Looking up IPv6 addresses
WARNING 2023-06-08 09:43:29,620 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2132: No 
IPv6 address will be assigned
INFO 2023-06-08 09:43:29,839 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2278: 
Setting up secrets.ldb
INFO 2023-06-08 09:43:29,856 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2283: 
Setting up the registry
INFO 2023-06-08 09:43:29,867 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2286: 
Setting up the privileges database
INFO 2023-06-08 09:43:29,895 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2289: 
Setting up idmap db
INFO 2023-06-08 09:43:29,915 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2296: 
Setting up SAM db
INFO 2023-06-08 09:43:29,921 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #880: Setting 
up sam.ldb partitions and settings
INFO 2023-06-08 09:43:29,922 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #892: Setting 
up sam.ldb rootDSE
INFO 2023-06-08 09:43:29,926 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #1305: 
Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint 
on local domainSIDs

INFO 2023-06-08 09:43:29,953 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2348: A 
Kerberos configuration suitable for Samba AD has been generated at 
/var/lib/samba/private/krb5.conf
INFO 2023-06-08 09:43:29,953 pid:3334782 
/usr/lib/python3/dist-packages/samba/provision/__init__.py #2350: Merge 
the contents of this file with your system krb5.conf or replace it with 
this one. Do not create a symlink!
Provision OK for domain DN DC=mydomain,DC=com,DC=co
Starting replication
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[402/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[804/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[1206/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[1608/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[2010/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[2412/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[2814/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[3212/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[3614/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[4016/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[4418/4046] linked_values[0/0]
Schema-DN[CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co] 
objects[4540/4046] linked_values[0/0]
Analyze and apply schema objects
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[330/7102] 
linked_values[0/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[474/7102] 
linked_values[0/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[632/7102] 
linked_values[0/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[795/7102] 
linked_values[0/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[948/7102] 
linked_values[135/3745]
Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1059/7102] 
linked_values[160/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1132/7102] 
linked_values[230/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1208/7102] 
linked_values[302/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1273/7102] 
linked_values[364/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1343/7102] 
linked_values[430/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1583/7102] 
linked_values[456/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[1985/7102] 
linked_values[456/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[2387/7102] 
linked_values[456/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[2738/7102] 
linked_values[718/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3063/7102] 
linked_values[718/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3292/7102] 
linked_values[718/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3351/7102] 
linked_values[718/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3498/7102] 
linked_values[815/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3660/7102] 
linked_values[938/3745]
dsdb_replicated_objects_convert: Ignoring object outside partition 
12274a55-72e8-4d29-afd4-984f7e000fc2 
CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co: 
WERR_DS_ADD_REPLICA_INHIBITED
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3791/7102] 
linked_values[946/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3861/7102] 
linked_values[1815/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[3992/7102] 
linked_values[1989/3745]
dsdb_replicated_objects_convert: Ignoring object outside partition 
12274a55-72e8-4d29-afd4-984f7e000fc2 
CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co: 
WERR_DS_ADD_REPLICA_INHIBITED
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4069/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4143/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4216/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4298/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4387/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4475/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4510/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4517/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4524/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4531/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4538/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4545/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4552/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4626/7102] 
linked_values[1989/3745]
dsdb_replicated_objects_convert: Ignoring object outside partition 
12274a55-72e8-4d29-afd4-984f7e000fc2 
CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co: 
WERR_DS_ADD_REPLICA_INHIBITED
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4700/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4773/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4854/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[4943/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5030/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5071/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5078/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5085/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5092/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5099/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5106/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5113/7102] 
linked_values[1989/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5191/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5265/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5339/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5417/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5506/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5594/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5686/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5776/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5866/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[5958/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6050/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6140/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6231/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6310/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6317/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6324/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6331/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6338/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6345/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6352/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6365/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6377/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6389/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6401/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6413/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6425/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6437/7102] 
linked_values[2020/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6490/7102] 
linked_values[2454/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6570/7102] 
linked_values[2708/3745]
Partition[CN=Configuration,DC=mydomain,DC=com,DC=co] objects[6678/7102] 
linked_values[2842/3745]
dsdb_replicated_objects_convert: Ignoring object outside partition 
12274a55-72e8-4d29-afd4-984f7e000fc2 
CN=Schema,CN=Configuration,DC=mydomain,DC=com,DC=co: 
WERR_DS_ADD_REPLICA_INHIBITED
Replicating critical objects from the base DN of the domain
Partition[DC=mydomain,DC=com,DC=co] objects[104/726] linked_values[19/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[160/726] linked_values[217/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[104/9701] linked_values[19/6426]
Failed to commit objects: DOS code 0x000021bf
Missing target object - retrying with DRS_GET_TGT
Partition[DC=mydomain,DC=com,DC=co] objects[208/9701] linked_values[25/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[312/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[415/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[513/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[614/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[708/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[795/9701] linked_values[52/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[882/9701] linked_values[63/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[953/9701] 
linked_values[112/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1016/9701] 
linked_values[154/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1081/9701] 
linked_values[197/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1149/9701] 
linked_values[239/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1220/9701] 
linked_values[287/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1287/9701] 
linked_values[333/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1350/9701] 
linked_values[375/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1413/9701] 
linked_values[419/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1477/9701] 
linked_values[460/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1543/9701] 
linked_values[502/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1609/9701] 
linked_values[541/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1676/9701] 
linked_values[582/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1779/9701] 
linked_values[587/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1862/9701] 
linked_values[597/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1927/9701] 
linked_values[649/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[1997/9701] 
linked_values[702/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2062/9701] 
linked_values[747/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2130/9701] 
linked_values[787/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2201/9701] 
linked_values[840/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2266/9701] 
linked_values[892/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2332/9701] 
linked_values[946/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2399/9701] 
linked_values[995/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2463/9701] 
linked_values[1041/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2530/9701] 
linked_values[1084/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2595/9701] 
linked_values[1130/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2664/9701] 
linked_values[1181/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2731/9701] 
linked_values[1223/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2797/9701] 
linked_values[1274/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2868/9701] 
linked_values[1324/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[2939/9701] 
linked_values[1377/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3044/9701] 
linked_values[1378/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3152/9701] 
linked_values[1384/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3220/9701] 
linked_values[1437/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3291/9701] 
linked_values[1481/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3360/9701] 
linked_values[1536/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3427/9701] 
linked_values[1579/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3493/9701] 
linked_values[1622/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3562/9701] 
linked_values[1671/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3637/9701] 
linked_values[1724/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3706/9701] 
linked_values[1773/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3772/9701] 
linked_values[1817/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3839/9701] 
linked_values[1867/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3912/9701] 
linked_values[1919/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[3976/9701] 
linked_values[1964/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4044/9701] 
linked_values[2009/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4113/9701] 
linked_values[2062/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4192/9701] 
linked_values[2115/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4265/9701] 
linked_values[2158/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4344/9701] 
linked_values[2192/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4431/9701] 
linked_values[2248/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4516/9701] 
linked_values[2281/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4589/9701] 
linked_values[2342/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4664/9701] 
linked_values[2384/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4738/9701] 
linked_values[2423/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4817/9701] 
linked_values[2467/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4882/9701] 
linked_values[2506/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[4946/9701] 
linked_values[2552/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5024/9701] 
linked_values[2591/6426]
dsdb_replicated_objects_convert: Ignoring object outside partition 
77ec0aaf-0186-4d3b-a0e4-ac6cf635c434 
CN=Configuration,DC=mydomain,DC=com,DC=co: WERR_DS_ADD_REPLICA_INHIBITED
dsdb_replicated_objects_convert: Ignoring object outside partition 
569db3ee-bdc5-40f6-a290-4c7289d5a940 
DC=DomainDnsZones,DC=mydomain,DC=com,DC=co: WERR_DS_ADD_REPLICA_INHIBITED
dsdb_replicated_objects_convert: Ignoring object outside partition 
075cd259-c6ad-4d92-812c-c89d3d83cec5 
DC=ForestDnsZones,DC=mydomain,DC=com,DC=co: WERR_DS_ADD_REPLICA_INHIBITED
Partition[DC=mydomain,DC=com,DC=co] objects[5099/9701] 
linked_values[2624/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5163/9701] 
linked_values[2678/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5236/9701] 
linked_values[2725/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5320/9701] 
linked_values[2742/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5392/9701] 
linked_values[2792/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5467/9701] 
linked_values[2843/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5537/9701] 
linked_values[2879/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5611/9701] 
linked_values[2928/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5690/9701] 
linked_values[2979/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5768/9701] 
linked_values[3037/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5835/9701] 
linked_values[3170/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5900/9701] 
linked_values[3250/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[5960/9701] 
linked_values[3350/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6020/9701] 
linked_values[3466/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6087/9701] 
linked_values[3544/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6153/9701] 
linked_values[3610/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6226/9701] 
linked_values[3688/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6296/9701] 
linked_values[3723/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6370/9701] 
linked_values[3770/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6423/9701] 
linked_values[3875/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6467/9701] 
linked_values[4023/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6513/9701] 
linked_values[4160/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6557/9701] 
linked_values[4311/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6640/9701] 
linked_values[4362/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6724/9701] 
linked_values[4376/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6808/9701] 
linked_values[4402/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6872/9701] 
linked_values[4465/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[6948/9701] 
linked_values[4470/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7027/9701] 
linked_values[4497/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7102/9701] 
linked_values[4500/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7177/9701] 
linked_values[4508/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7249/9701] 
linked_values[4508/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7322/9701] 
linked_values[4508/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7401/9701] 
linked_values[4509/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7469/9701] 
linked_values[4559/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7529/9701] 
linked_values[4630/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7608/9701] 
linked_values[4630/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7680/9701] 
linked_values[4630/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7752/9701] 
linked_values[4630/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7825/9701] 
linked_values[4631/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7904/9701] 
linked_values[4634/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[7975/9701] 
linked_values[4659/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[8057/9701] 
linked_values[4687/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[8134/9701] 
linked_values[4696/6426]
Partition[DC=mydomain,DC=com,DC=co] objects[8183/9701] 
linked_values[4704/6426]
Done with always replicated NC (base, config, schema)
Replicating DC=DomainDnsZones,DC=mydomain,DC=com,DC=co
Join failed - cleaning up
Deleted CN=REPLICA-AWS,OU=Domain Controllers,DC=mydomain,DC=com,DC=co
Deleted CN=krbtgt_29903,CN=Users,DC=mydomain,DC=com,DC=co
Deleted CN=RODC Connection (FRS),CN=NTDS 
Settings,CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
Deleted CN=NTDS 
Settings,CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
Deleted 
CN=REPLICA-AWS,CN=Servers,CN=aws,CN=Sites,CN=Configuration,DC=mydomain,DC=com,DC=co
ERROR(runtime): uncaught exception - (8453, 'WERR_DS_DRA_ACCESS_DENIED')
   File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 
186, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 
711, in run
     join_RODC(logger=logger, server=server, creds=creds, lp=lp, 
domain=domain,
   File "/usr/lib/python3/dist-packages/samba/join.py", line 1544, in 
join_RODC
     ctx.do_join()
   File "/usr/lib/python3/dist-packages/samba/join.py", line 1469, in 
do_join
     ctx.join_replicate()
   File "/usr/lib/python3/dist-packages/samba/join.py", line 1026, in 
join_replicate
     repl.replicate(nc, source_dsa_invocation_id,
   File "/usr/lib/python3/dist-packages/samba/drs_utils.py", line 361, 
in replicate
     (level, ctr) = self.drs.DsGetNCChanges(self.drs_handle, req_level, req)




More information about the samba mailing list