[cifs-protocol] [REG:111060858976134] Deleted object removal

Wed Jun 22 13:11:43 MDT 2011

On 22/06/2011 22:53, Hongwei Sun wrote:
> Matthieu,
>
>     I noted that the tombtoned objects left on the Windows server (172.16.100.27) are not  in Delete Objects container.  They are deleted server objects  for DC ARES(Samba DC)  that have FLAG_DISALLOW_MOVE_ON_DELETE set.   I am wondering if it is due to a unsuccessful DC demotion in the past(http://support.microsoft.com/?id=216498) .   Could you tell me the exact steps of your testing ?
Well it's mostly DC that for some reasons I didn't demoted properly, 
either because I lost the samba provision, or just for any other reason.

> I assume that  (1) you promoted a Samba to a DC and joined it to Windows DC, (2) then demoted the Samba DC, (3)then created and deleted some user group so there are some object deletion occurring.   Please confirm.
So step 2 almost never happen, I guess they were removed because I just 
removed the 'ARES' object in the Domain Controllers container.

Then yes I created and deleted users and changed the tombstones lifetime 
to be only 10 days instead of 180 days.

Matthieu.
>
> Thanks!
>
> Hongwei
>
> -----Original Message-----
> From: cifs-protocol-bounces at cifs.org [mailto:cifs-protocol-bounces at cifs.org] On Behalf Of Matthieu Patou
> Sent: Friday, June 17, 2011 1:50 PM
> To: Edgar Olougouna
> Cc: pfif at tridgell.net; cifs-protocol at samba.org
> Subject: Re: [cifs-protocol] [REG:111060858976134] Deleted object removal
>
> Hi Edgar,
>
> Do you have any news on this problem?
>
> Regards.
>
> Matthieu.
>
> On 08/06/2011 23:46, Edgar Olougouna wrote:
>> Matthieu,
>>
>> I am investigating this and will update you as soon as I have news.
>>
>> Regards,
>> Edgar
>>
>> -----Original Message-----
>> From: Bryan Burgin
>> Sent: Wednesday, June 08, 2011 11:26 AM
>> To: mat at samba.org; pfif at tridgell.net; cifs-protocol at samba.org
>> Cc: MSSolve Case Email
>> Subject: [REG:111060858976134] Deleted object removal
>>
>> [dochelp to bcc]
>> [adding case number and case mail]
>>
>> Hi, Matthieu,
>>
>> Thank you for your question.  I created case 111060858976134 to track this.  An engineer from the Protocol team will pick this up soon.
>>
>> Bryan
>>
>> -----Original Message-----
>> From: Matthieu Patou [mailto:mat at samba.org]
>> Sent: Wednesday, June 08, 2011 12:33 AM
>> To: Interoperability Documentation Help; pfif at tridgell.net; cifs-protocol at samba.org
>> Subject: Deleted object removal
>>
>> Hello doc help team,
>>
>> On a Windows 2008R2 server I joined and unjoined a Samba 4 domain controller and created users and groups and then deleted them.
>>
>> As the recycle bin is not activated this has resulted to ~ 100 of deleted objects. Most of this took place between march 2011 and mid may 2011.
>> With the default tombstonelifetime (180 days) the objects were not removed. Then last saturday I changed this value to 10 days.
>>
>> ./bin/ldbsearch -H ldap://172.16.100.27 -U administrator%totoTATA321 '(tombstonelifetime=*)' --show-deleted --cross-ncs tombstonelifetime # record 1
>> dn: CN=Directory Service,CN=Windows
>> NT,CN=Services,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> tombstoneLifetime: 10
>>
>> # returned 1 records
>> # 1 entries
>> # 0 referrals
>>
>> Within a couple of hours most of the objects were removed, that's mostly what I expected. Still I had the following ones:
>>
>> # record 1
>> dn:
>> CN=ARES\0ADEL:6d4b237f-b7a8-4b34-ad25-61af76145272,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505155906.0Z
>>
>> # record 2
>> dn:
>> CN=ARES\0ADEL:1757303b-6f90-434b-a3f7-215a92c2ecd5,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505164717.0Z
>>
>> # record 3
>> dn:
>> CN=ARES\0ADEL:2e6bc9e6-a2cc-4d47-bfde-07a6fe649878,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505164200.0Z
>>
>> # record 4
>> dn:
>> CN=ARES\0ADEL:91cf9b10-8e4c-4ea7-a46b-7cf32d5c9754,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505154845.0Z
>>
>> # record 5
>> dn:
>> CN=ARES\0ADEL:197e888f-cbb2-4d15-9699-d91dc4cf370b,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110513094933.0Z
>>
>> # record 6
>> dn:
>> CN=ARES\0ADEL:b037755f-5f4b-47af-9064-d50d82fbe757,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505160242.0Z
>>
>> # record 7
>> dn:
>> CN=ARES\0ADEL:140a486c-430e-4a3c-9b6a-5df6914a2638,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505171053.0Z
>>
>> # record 8
>> dn:
>> CN=ARES\0ADEL:c40d63c2-7045-4ea1-ab46-c0a5d6f203a9,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110513120439.0Z
>>
>> # record 9
>> dn:
>>
>> CN=ARES\0ADEL:16df8618-cc2a-4969-9d75-9666cce09ade,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505164942.0Z
>>
>> # record 10
>> dn:
>> CN=ARES\0ADEL:a894b564-2639-4940-a69a-09f37977c125,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505155924.0Z
>>
>> # record 11
>> dn:
>> CN=ARES\0ADEL:48eb0e2d-7b1f-480a-bbcc-5047a2f00e69,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505160128.0Z
>>
>> # record 12
>> dn:
>> CN=ARES\0ADEL:2800d082-75f6-417a-afb0-c83cba4274c8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net
>> whenChanged: 20110505161112.0Z
>>
>>
>> As they are older than 10 days I don't understand why they were not removed right away.
>> Is there any explanation ?
>>
>> Matthieu.
>>
>> --
>> Matthieu Patou
>> Samba Team        http://samba.org
>> Private repo      http://git.samba.org/?p=mat/samba.git;a=summary
>>
>>
>>
>>
>

-- 
Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary