DomainDnsZones replication problem

[Samuel Cabrero]

Hello,

I was testing samba4 beta2 as an additional DC of an existent domain
created in a windows 2008 R2 machine and I have found problems with the
DomainDnsZones partition replication from samba to windows.

After join samba4 to the domain and setup bind, "samba-tool drs show
repl" shows that DomainDnsZones and ForestDnsZones were not replicated
from samba to windows, so I forced them with "samba-tool drs replicate
--local" and after that they appear in the "showrepl" output.

The problem is that after adding some records to bind with "nsupdate -g"
or directly to LDB with an LDIF file, they are not being replicated to
windows because they are discarded with a "Discarding older DRS
attribute update" message.

I have attached the log output. Maybe I am missing something?

Cheers.

-- 
Samuel Cabrero - Developer
scabrero at zentyal.com

The Linux small business server
www.zentyal.com
-------------- next part --------------
_drepl_schedule_replication: forcing sync of partition (ea8756c3-89d1-4941-8bee-86ca4c092402, DC=DomainDnsZones,DC=kernevil,DC=lan, 21a82285-40e5-4110-9d65-5d7d5b00097d._msdcs.kernevil.lan)
dreplsrv_notify: DsReplicaSync OK for 21a82285-40e5-4110-9d65-5d7d5b00097d._msdcs.kernevil.lan
../source4/rpc_server/drsuapi/getncchanges.c:1372: getncchanges on DC=DomainDnsZones,DC=kernevil,DC=lan using filter (uSNChanged>=3553)
DsGetNCChanges with uSNChanged >= 3553 flags 0x00000070 on <GUID=ea8756c3-89d1-4941-8bee-86ca4c092402>;DC=DomainDnsZones,DC=kernevil,DC=lan gave 2 objects (done 2/2) 0 links (done 0/0 (as S-1-5-21-761511450-1428701289-3745752131-1104))
Discarding older DRS attribute update to objectClass on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to whenCreated on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to showInAdvancedViewOnly on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to nTSecurityDescriptor on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to name on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to dnsRecord on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to objectCategory on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to dc on DC=pc4,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Discarding older DRS attribute update to dnsRecord on DC=@,DC=kernevil.lan,CN=MicrosoftDNS,DC=DomainDnsZones,DC=kernevil,DC=lan from 50afb1d8-faac-4335-9668-914f00efa8d9
Replicated 2 objects (0 linked attributes) for DC=DomainDnsZones,DC=kernevil,DC=lan
Replicated 0 objects (0 linked attributes) for DC=DomainDnsZones,DC=kernevil,DC=lan
../source4/rpc_server/drsuapi/getncchanges.c:1372: getncchanges on DC=DomainDnsZones,DC=kernevil,DC=lan using filter (uSNChanged>=3556)
DsGetNCChanges with uSNChanged >= 3556 flags 0x00000070 on <GUID=ea8756c3-89d1-4941-8bee-86ca4c092402>;DC=DomainDnsZones,DC=kernevil,DC=lan gave 0 objects (done 0/0) 0 links (done 0/0 (as S-1-5-21-761511450-1428701289-3745752131-1104))
Replicated 0 objects (0 linked attributes) for DC=DomainDnsZones,DC=kernevil,DC=lan
Replicated 0 objects (0 linked attributes) for DC=ForestDnsZones,DC=kernevil,DC=lan
../source4/rpc_server/drsuapi/getncchanges.c:1372: getncchanges on DC=ForestDnsZones,DC=kernevil,DC=lan using filter (uSNChanged>=3541)
DsGetNCChanges with uSNChanged >= 3541 flags 0x00000070 on <GUID=a0690a2a-9b7a-4028-9cee-d4cce303f7b7>;DC=ForestDnsZones,DC=kernevil,DC=lan gave 0 objects (done 0/0) 0 links (done 0/0 (as S-1-5-21-761511450-1428701289-3745752131-1104))
Replicated 0 objects (0 linked attributes) for DC=ForestDnsZones,DC=kernevil,DC=lan
Replicated 0 objects (0 linked attributes) for DC=kernevil,DC=lan
Replicated 0 objects (0 linked attributes) for CN=Configuration,DC=kernevil,DC=lan
Replicated 0 objects (0 linked attributes) for CN=Schema,CN=Configuration,DC=kernevil,DC=lan
Terminating connection - 'NT_STATUS_CONNECTION_DISCONNECTED'
single_terminate: reason[NT_STATUS_CONNECTION_DISCONNECTED]