Need urgent help with samba4 DC re-join

[Andreas Oster]

Am 18.07.2012 10:56, schrieb Andrew Bartlett:
> On Wed, 2012-07-18 at 10:38 +0200, Andreas Oster wrote:
>> Am 18.07.2012 09:48, schrieb Andrew Bartlett:
>>> On Wed, 2012-07-18 at 09:20 +0200, Andreas Oster wrote:
>>>> Am 18.07.2012 08:11, schrieb Andreas Oster:
>>>>> Am 18.07.2012 08:03, schrieb Andrew Bartlett:
>>>>>> On Wed, 2012-07-18 at 07:10 +0200, Andreas Oster wrote:
>>>>>>
>>>>>>> Hello Andrew,
>>>>>>>
>>>>>>> unfortunately dbcheck did not work. The following error messages showed up:
>>>>>>>
>>>>>>> ERROR: wrong instanceType 11 on DC=DomainDnsZones,DC=novanetwork,DC=loc,
>>>>>>> should be 13
>>>>>>> ERROR(<type 'exceptions.AttributeError'>): uncaught exception -
>>>>>>> 'dbcheck' object has no attribute 'modify_instancetype'
>>>>>>>   File
>>>>>>
>>>>>> Thanks.  I've updated my branch with what I hope will be a fix.  This
>>>>>> time I've modified a local DB to replicate your error condition, and
>>>>>> confirmed it all works.
>>>>>>
>>>>>> However, it will only allow the instanceType to be changed, the
>>>>>> objectClass can't be fixed yet.  But if you can confirm what I have so
>>>>>> far works for you, I'll see what I can do about the rest.
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Andrew Bartlett
>>>>>>
>>>>> Hello Andrew,
>>>>>
>>>>> thank you, I will test with your changed patches and will report back.
>>>>>
>>>>> Andreas
>>>>>
>>>>>
>>>> Hello Andrew,
>>>>
>>>> just to be sure, do I have to pull the sources from your git tree or is
>>>> it sufficient to get the diffs from your tree and patch the master
>>>> sources ? If so which are the diffs I would need ?
>>>
>>> My tree is on top of current master, but it will be simplest to check
>>> out my tree.
>>>
>>> it should be something like
>>> git remote add abartlet git://git.samba.org/abartlet/samba.git
>>> git checkout abartlet/repl-devel -b repl-devel
>>>
>>> Andrew Bartlett
>>>
>> Hi Andrew
>>
>> I've pulled the vanilla master then did
>> git remote add abartlet git://git.samba.org/abartlet/samba.git
>> which succeeds without errors, but when doing
>>
>> git checkout abartlet/repl-devel -b repl-devel
>>
>> i get :
>>
>> fatal: git checkout: updating paths is incompatible with switching branches.
>> Did you intend to checkout 'abartlet/repl-devel' which can not be
>> resolved as commit?
>>
>> sorry that I have to plague you, but I am not familiar with those git
>> commands.
> 
> Sorry, I missed:
> 
> git fetch abartlet
> 
> then do
> 
> git checkout abartlet/repl-devel -b repl-devel
> 
> 
Hello Andrew,

thanks, I've managed to fetch, recompile and install your tree.

dbcheck seems to have succeeded this time:

ERROR: wrong instanceType 11 on DC=DomainDnsZones,DC=novanetwork,DC=loc,
should be 13
Change instanceType from 11 to 13 on
DC=DomainDnsZones,DC=novanetwork,DC=loc? [y/N/all/none] all
Corrected instancetype on DC=DomainDnsZones,DC=novanetwork,DC=loc by
setting instanceType=13
ERROR: wrong instanceType 11 on DC=ForestDnsZones,DC=novanetwork,DC=loc,
should be 13
Change instanceType from 11 to 13 on
DC=ForestDnsZones,DC=novanetwork,DC=loc? [YES]
Corrected instancetype on DC=ForestDnsZones,DC=novanetwork,DC=loc by
setting instanceType=13


../bin/ldbsearch -H sam.ldb -s base -b
DC=DomainDnsZones,DC=novanetwork,DC=loc
# record 1
dn: DC=DomainDnsZones,DC=novanetwork,DC=loc
description: Microsoft DNS Directory
uSNCreated: 4050
name: DomainDnsZones
objectGUID: a1e40623-4805-4e11-9471-9cb0b49b1dc8
msDS-NcType: 0
dc: DomainDnsZones
wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS
Quotas,DC=Doma
 inDnsZones,DC=novanetwork,DC=loc
wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted
Objects,DC=
 DomainDnsZones,DC=novanetwork,DC=loc
wellKnownObjects:
B:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=Infrastructure,DC=D
 omainDnsZones,DC=novanetwork,DC=loc
wellKnownObjects:
B:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFound,DC=Dom
 ainDnsZones,DC=novanetwork,DC=loc
msDs-masteredBy: CN=NTDS
Settings,CN=NOVADC01,CN=Servers,CN=Standardname-des-e
 rsten-Standorts,CN=Sites,CN=Configuration,DC=novanetwork,DC=loc
objectClass: top
whenCreated: 20120422140706.0Z
objectCategory: CN=Top,CN=Schema,CN=Configuration,DC=novanetwork,DC=loc
instanceType: 13
whenChanged: 20120718101505.0Z
uSNChanged: 93639
distinguishedName: DC=DomainDnsZones,DC=novanetwork,DC=loc

# returned 1 records
# 1 entries
# 0 referrals


 ../bin/ldbsearch -H sam.ldb -s base -b
DC=ForestDnsZones,DC=novanetwork,DC=loc
# record 1
dn: DC=ForestDnsZones,DC=novanetwork,DC=loc
description: Microsoft DNS Directory
uSNCreated: 4051
name: ForestDnsZones
objectGUID: a7084706-4f64-4545-ba22-0b5e9cb27da0
msDS-NcType: 0
dc: ForestDnsZones
wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS
Quotas,DC=Fore
 stDnsZones,DC=novanetwork,DC=loc
wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted
Objects,DC=
 ForestDnsZones,DC=novanetwork,DC=loc
wellKnownObjects:
B:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=Infrastructure,DC=F
 orestDnsZones,DC=novanetwork,DC=loc
wellKnownObjects:
B:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFound,DC=For
 estDnsZones,DC=novanetwork,DC=loc
msDs-masteredBy: CN=NTDS
Settings,CN=NOVADC01,CN=Servers,CN=Standardname-des-e
 rsten-Standorts,CN=Sites,CN=Configuration,DC=novanetwork,DC=loc
objectClass: top
whenCreated: 20120422140706.0Z
objectCategory: CN=Top,CN=Schema,CN=Configuration,DC=novanetwork,DC=loc
instanceType: 13
whenChanged: 20120718101507.0Z
uSNChanged: 93640
distinguishedName: DC=ForestDnsZones,DC=novanetwork,DC=loc

# returned 1 records
# 1 entries
# 0 referrals




Regarding the "ERROR: Normalisation error for attribute whenCreated in
CN=MS-DS-Consistency-Guid,CN=Schema,CN=Configuration,DC=novanetwork,DC=loc
value '19691231235959.0Z' should be '19700101000000.0Z'"
there seems to be an error in dbcheck. As you can see the value has been
changed to '19691231235959.0Z' in the last dbcheck run, but now it says
that it should have been set to '19700101000000.0Z'. Then again, in a
following run it shows: value '19700101000000.0Z' should be
'16010101000000.0Z'. This error is looping somehow and shows up with
every additional dbcheck run.



Thank you

Andreas