drs problems

[Matthieu Patou]

Hello Tridge, Metze and other DRS guru,


I've a setup with a Windows DC and a Samba DC.

The domain has been created under samba.
The replication seems a bit strange

Here is the result of samba-tool drs on both server.

Default-First-Site-Name\Windows
DSA Options: 0x00000000
DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
DSA invocationId: f4b3d9c3-91b1-4592-b070-8ee941aa86e8

==== INBOUND NEIGHBORS ====

DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ Thu Jul 28 18:56:40 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 18:56:40 2011 MSD

CN=Configuration,DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ Thu Jul 28 16:53:53 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 16:53:53 2011 MSD

CN=Schema,CN=Configuration,DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ Thu Jul 28 16:53:53 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 16:53:53 2011 MSD

==== OUTBOUND NEIGHBORS ====

DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain,DC=tld
         Moscow-Yak\Samba via RPC
                 DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
                 Last attempt @ NTTIME(0) was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)


Moscow-Yak\Samba
DSA Options: 0x00000001
DSA object GUID: f091b72b-4307-40d0-be64-ab697f35f106
DSA invocationId: 4dc65950-fc6d-4dd4-98da-7bd3eb15a702

==== INBOUND NEIGHBORS ====

DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:39:11 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 20:39:11 2011 MSD

CN=Schema,CN=Configuration,DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:39:11 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 20:39:11 2011 MSD

CN=Configuration,DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:39:11 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ Thu Jul 28 20:39:11 2011 MSD

==== OUTBOUND NEIGHBORS ====

DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:40:55 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:40:55 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

CN=Configuration,DC=domain,DC=tld
         Default-First-Site-Name\Windows via RPC
                 DSA object GUID: 6c386265-6bda-482d-a0be-8060c5d791ef
                 Last attempt @ Thu Jul 28 20:40:55 2011 MSD was successful
                 0 consecutive failure(s).
                 Last success @ NTTIME(0)

My understanding is that inbound neighbors in incoming traffic and 
outbound is outgoing.

It's interesting to note that for the DC=domain,DC=tld partition the 
Windows Server says that he received last time at  Jul 28 18:56:40 2011 
MSD something (from the Samba server I suppose) but the Samba server 
says that it sent something to the Windows DC at Thu Jul 28 20:40:55 
2011 MSD was successful for the last time.

How can it be like this ?

Also I noticed that if I restart the windows server the Inbound neighbor 
connection of the samba server will be in status unable to connect.

And finaly in the logs I have:dreplsrv_notify: Failed to send 
DsReplicaSync to 6c386265-6bda-482d-a0be-8060c5d791ef._msdcs.domain.tld 
for CN=Schema,CN=Configuration,DC=domain,DC=tld - NT code 0xc0002104 : 
WERR_DS_DRA_NO_REPLICA

But the showrepl show that the connection is ok ...

-- 
Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary