upgradeprovision --full fails to find CN=NTDS Settings

[Matthieu Patou]

On 03/01/2012 14:40, Michael Wood wrote:
> There are now only a couple of issues left as far as I can see.  If I
> run "upgradeprovision --full" again, it says "There are 2 missing
> objects".  I assume that should not be the case?
>
> Creating a reference provision
> No IPv6 address will be assigned
> Copy privilege
> Update base samdb by searching difference with reference one
> Starting update of samdb
> There are 2 missing objects
What --debugall says about this objects ?
> Reloading a merged schema, which might trigger reindexing so please be patient
> Schema reloaded!
> There are 0 changed objects
> Update of samdb finished
> Update of secrets.ldb
> Update machine account
> Some defaultSecurityDescriptors and/orsecurityDescriptor have changed,
> recalculating SD
> Upgrade finished!
> Reopenning samdb to trigger reindexing if needed after modification
> Reindexing finished
>
> Also, samba-tool dbcheck complains about the following two things it can't fix:
>
> ERROR: missing GUID component for wellKnownObjects in object
> DC=DomainDnsZones,DC=example,DC=com -
> B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted
> Objects,DC=DomainDnsZones,DC=example,DC=com
> unable to find object for DN CN=Deleted
> Objects,DC=DomainDnsZones,DC=example,DC=com - (No such Base DN:
> CN=Deleted Objects,DC=DomainDnsZones,DC=example,DC=com)
> Not removing dangling forward link
> ERROR: missing GUID component for wellKnownObjects in object
> DC=ForestDnsZones,DC=example,DC=com -
> B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted
> Objects,DC=ForestDnsZones,DC=example,DC=com
> unable to find object for DN CN=Deleted
> Objects,DC=ForestDnsZones,DC=example,DC=com - (No such Base DN:
> CN=Deleted Objects,DC=ForestDnsZones,DC=example,DC=com)
> Not removing dangling forward link
>
> Should upgradeprovision have created those Base DNs?  Are these
> perhaps the two "missing objects" that upgradeprovision mentions when
> it runs?
It's because the code for upgradeprovision is not complete yet to 
correctly cope with missing partitions

Matthieu.

-- 
Matthieu Patou
Samba Team
http://samba.org