upgradedns issue

Aaron E. ssureshot at gmail.com
Thu Jun 14 06:04:58 MDT 2012 

On 06/13/2012 09:27 AM, Amitay Isaacs wrote:
> On Wed, Jun 13, 2012 at 8:54 PM, ssureshot<ssureshot at gmail.com>  wrote:
>>
>>> Hi Aaron,
>>>
>>> Can you tell me the output of the following commands on both DCs?
>>>
>>>   # ldbsearch -H /path/to/sam.ldb "(objectclass=ntdsdsa)" --cross-ncs
>>>   # ldbsearch -H /path/to/sam.ldb "(objectclass=crossref)" --cross-ncs
>>>
>>> Amitay.
>>
>> Both outputs are below.
>>
>> root at adc1--/opt/samba4/private\>>  ldbsearch -H ./sam.ldb
>> "(objectclass=ntdsdsa)" --cross-ncs
>> GENSEC backend 'gssapi_spnego' registered
>> GENSEC backend 'gssapi_krb5' registered
>> GENSEC backend 'gssapi_krb5_sasl' registered
>> GENSEC backend 'sasl-DIGEST-MD5' registered
>> GENSEC backend 'schannel' registered
>> GENSEC backend 'spnego' registered
>> GENSEC backend 'ntlmssp' registered
>> GENSEC backend 'krb5' registered
>> GENSEC backend 'fake_gssapi_krb5' registered
>> # record 1
>> dn: CN=NTDS
>> Settings,CN=ASTRODC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: applicationSettings
>> objectClass: nTDSDSA
>> cn: NTDS Settings
>> instanceType: 4
>> whenCreated: 20120425124940.0Z
>> hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
>> hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> hasMasterNCs: DC=astrointernal,DC=com
>> uSNCreated: 3591
>> dMDLocation: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> invocationId: a3fd46b2-033f-4f1b-8875-c01f05964830
>> showInAdvancedViewOnly: TRUE
>> name: NTDS Settings
>> objectGUID: 8b2675ab-c9f9-4859-85fe-425b65483ffe
>> options: 1
>> systemFlags: 33554432
>> objectCategory:
>> CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> msDS-Behavior-Version: 4
>> msDS-HasDomainNCs: DC=astrointernal,DC=com
>> msDS-HasInstantiatedNCs:
>> B:8:0000000D:CN=Configuration,DC=astrointernal,DC=com
>> msDS-HasInstantiatedNCs:
>> B:8:0000000D:CN=Schema,CN=Configuration,DC=astrointer
>>   nal,DC=com
>> msDS-HasInstantiatedNCs: B:8:00000005:DC=astrointernal,DC=com
>> msDS-HasInstantiatedNCs:
>> B:8:0000000D:DC=DomainDnsZones,DC=astrointernal,DC=co
>>   m
>> msDS-HasInstantiatedNCs:
>> B:8:0000000D:DC=ForestDnsZones,DC=astrointernal,DC=co
>>   m
>> msDS-hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
>> msDS-hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> msDS-hasMasterNCs: DC=astrointernal,DC=com
>> msDS-hasMasterNCs: DC=DomainDnsZones,DC=astrointernal,DC=com
>> msDS-hasMasterNCs: DC=ForestDnsZones,DC=astrointernal,DC=com
>> whenChanged: 20120611165729.0Z
>> uSNChanged: 4684
>> distinguishedName: CN=NTDS
>> Settings,CN=ASTRODC1,CN=Servers,CN=Default-First-Si
>>   te-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>>
>> # record 2
>> dn: CN=NTDS
>> Settings,CN=ASTRODC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: applicationSettings
>> objectClass: nTDSDSA
>> cn: NTDS Settings
>> instanceType: 4
>> whenCreated: 20120426125257.0Z
>> hasMasterNCs: DC=astrointernal,DC=com
>> hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
>> hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> uSNCreated: 3722
>> dMDLocation: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> invocationId: ffb0ad99-573a-42c0-a82d-24b635f89d61
>> showInAdvancedViewOnly: TRUE
>> name: NTDS Settings
>> objectGUID: db0a2e8d-f331-4034-b0a3-f44b9cefc246
>> options: 1
>> systemFlags: 33554432
>> objectCategory:
>> CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> msDS-Behavior-Version: 4
>> msDS-HasDomainNCs: DC=astrointernal,DC=com
>> msDS-hasMasterNCs: DC=astrointernal,DC=com
>> msDS-hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
>> msDS-hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> whenChanged: 20120611165841.0Z
>> hasPartialReplicaNCs: DC=DomainDnsZones,DC=astrointernal,DC=com
>> hasPartialReplicaNCs: DC=ForestDnsZones,DC=astrointernal,DC=com
>> uSNChanged: 4795
>> distinguishedName: CN=NTDS
>> Settings,CN=ASTRODC2,CN=Servers,CN=Default-First-Si
>>   te-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>>
>> # returned 2 records
>> # 2 entries
>> # 0 referrals
>>
>>
>> root at adc1--/opt/samba4/private\>>  ldbsearch -H ./sam.ldb
>> "(objectclass=crossref)" --cross-ncs
>> GENSEC backend 'gssapi_spnego' registered
>> GENSEC backend 'gssapi_krb5' registered
>> GENSEC backend 'gssapi_krb5_sasl' registered
>> GENSEC backend 'sasl-DIGEST-MD5' registered
>> GENSEC backend 'schannel' registered
>> GENSEC backend 'spnego' registered
>> GENSEC backend 'ntlmssp' registered
>> GENSEC backend 'krb5' registered
>> GENSEC backend 'fake_gssapi_krb5' registered
>> # record 1
>> dn:
>> CN=22e44e25-1790-4367-ac76-2d5cdaea1178,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: crossRef
>> cn: 22e44e25-1790-4367-ac76-2d5cdaea1178
>> instanceType: 4
>> whenCreated: 20120611165729.0Z
>> whenChanged: 20120611165729.0Z
>> nCName: DC=ForestDnsZones,DC=astrointernal,DC=com
>> uSNCreated: 4679
>> uSNChanged: 4679
>> showInAdvancedViewOnly: TRUE
>> name: 22e44e25-1790-4367-ac76-2d5cdaea1178
>> objectGUID: 081959c5-f173-4c20-ad3e-5426a9a1c845
>> dnsRoot: ForestDnsZones.astrointernal.com
>> systemFlags: 5
>> objectCategory:
>> CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
>>   m
>> msDS-NC-Replica-Locations: CN=NTDS
>> Settings,CN=ASTRODC1,CN=Servers,CN=Default-
>>   First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>> distinguishedName:
>> CN=22e44e25-1790-4367-ac76-2d5cdaea1178,CN=Partitions,CN=Co
>>   nfiguration,DC=astrointernal,DC=com
>>
>> # record 2
>> dn:
>> CN=3b0bb6e8-82d5-4ebf-9b89-7b5de783516e,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: crossRef
>> cn: 3b0bb6e8-82d5-4ebf-9b89-7b5de783516e
>> instanceType: 4
>> whenCreated: 20120611165729.0Z
>> whenChanged: 20120611165729.0Z
>> nCName: DC=DomainDnsZones,DC=astrointernal,DC=com
>> uSNCreated: 4678
>> uSNChanged: 4678
>> showInAdvancedViewOnly: TRUE
>> name: 3b0bb6e8-82d5-4ebf-9b89-7b5de783516e
>> objectGUID: 4b33edf5-12c9-40c5-8f90-06571e2d47df
>> dnsRoot: DomainDnsZones.astrointernal.com
>> systemFlags: 5
>> objectCategory:
>> CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
>>   m
>> msDS-NC-Replica-Locations: CN=NTDS
>> Settings,CN=ASTRODC1,CN=Servers,CN=Default-
>>   First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
>> distinguishedName:
>> CN=3b0bb6e8-82d5-4ebf-9b89-7b5de783516e,CN=Partitions,CN=Co
>>   nfiguration,DC=astrointernal,DC=com
>>
>> # record 3
>> dn: CN=Enterprise
>> Configuration,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: crossRef
>> cn: Enterprise Configuration
>> instanceType: 4
>> whenCreated: 20120425124934.0Z
>> whenChanged: 20120425124934.0Z
>> nCName: CN=Configuration,DC=astrointernal,DC=com
>> uSNCreated: 1938
>> uSNChanged: 1938
>> showInAdvancedViewOnly: TRUE
>> name: Enterprise Configuration
>> objectGUID: 4217fbf4-7f3f-4070-adcf-5e864ee71fa1
>> dnsRoot: astrointernal.com
>> systemFlags: 1
>> objectCategory:
>> CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
>>   m
>> distinguishedName: CN=Enterprise
>> Configuration,CN=Partitions,CN=Configuration,
>>   DC=astrointernal,DC=com
>>
>> # record 4
>> dn: CN=Enterprise
>> Schema,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: crossRef
>> cn: Enterprise Schema
>> instanceType: 4
>> whenCreated: 20120425124934.0Z
>> whenChanged: 20120425124934.0Z
>> nCName: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
>> uSNCreated: 1939
>> uSNChanged: 1939
>> showInAdvancedViewOnly: TRUE
>> name: Enterprise Schema
>> objectGUID: 364e1d13-6ad0-43ee-a48e-15de0d8e09fc
>> dnsRoot: astrointernal.com
>> systemFlags: 1
>> objectCategory:
>> CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
>>   m
>> distinguishedName: CN=Enterprise
>> Schema,CN=Partitions,CN=Configuration,DC=astr
>>   ointernal,DC=com
>>
>> # record 5
>> dn: CN=ASTROINTERNAL,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
>> objectClass: top
>> objectClass: crossRef
>> cn: ASTROINTERNAL
>> instanceType: 4
>> whenCreated: 20120425124934.0Z
>> whenChanged: 20120425124934.0Z
>> nCName: DC=astrointernal,DC=com
>> uSNCreated: 1940
>> uSNChanged: 1940
>> showInAdvancedViewOnly: TRUE
>> name: ASTROINTERNAL
>> objectGUID: 7f239948-1254-40a1-8ac0-75fdecc64b23
>> dnsRoot: astrointernal.com
>> nETBIOSName: ASTROINTERNAL
>> nTMixedDomain: 0
>> systemFlags: 3
>> objectCategory:
>> CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
>>   m
>> msDS-Behavior-Version: 2
>> distinguishedName:
>> CN=ASTROINTERNAL,CN=Partitions,CN=Configuration,DC=astroint
>>   ernal,DC=com
>>
>> # returned 5 records
>> # 5 entries
>> # 0 referrals
>>
>
> Can you run the same commands on the second DC? I would like to
> compare the results between two DCs.
>
> Amitay.
>
Sorry for the delay, I took the day off yesterday.. Here is the same 
output from DC2

root at adc2--/opt/samba4/private\>> ldbsearch -H ./sam.ldb 
"(objectclass=ntdsdsa)" --cross-ncs
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'sasl-DIGEST-MD5' registered
GENSEC backend 'schannel' registered
GENSEC backend 'spnego' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
# record 1
dn: CN=NTDS 
Settings,CN=ASTRODC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: applicationSettings
objectClass: nTDSDSA
cn: NTDS Settings
instanceType: 4
whenCreated: 20120425124940.0Z
uSNCreated: 3168
dMDLocation: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
invocationId: a3fd46b2-033f-4f1b-8875-c01f05964830
showInAdvancedViewOnly: TRUE
name: NTDS Settings
objectGUID: 8b2675ab-c9f9-4859-85fe-425b65483ffe
options: 1
systemFlags: 33554432
objectCategory: 
CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=astrointernal,DC=com
msDS-Behavior-Version: 4
hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
hasMasterNCs: DC=astrointernal,DC=com
msDS-HasDomainNCs: DC=astrointernal,DC=com
whenChanged: 20120611165828.0Z
msDS-HasInstantiatedNCs: 
B:8:0000000D:CN=Configuration,DC=astrointernal,DC=com
msDS-HasInstantiatedNCs: 
B:8:0000000D:CN=Schema,CN=Configuration,DC=astrointer
  nal,DC=com
msDS-HasInstantiatedNCs: B:8:00000005:DC=astrointernal,DC=com
msDS-hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
msDS-hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
msDS-hasMasterNCs: DC=astrointernal,DC=com
msDS-hasMasterNCs: DC=DomainDnsZones,DC=astrointernal,DC=com
msDS-hasMasterNCs: DC=ForestDnsZones,DC=astrointernal,DC=com
uSNChanged: 4302
distinguishedName: CN=NTDS 
Settings,CN=ASTRODC1,CN=Servers,CN=Default-First-Si
  te-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com

# record 2
dn: CN=NTDS 
Settings,CN=ASTRODC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: applicationSettings
objectClass: nTDSDSA
cn: NTDS Settings
instanceType: 4
whenCreated: 20120426125257.0Z
uSNCreated: 3169
dMDLocation: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
invocationId: ffb0ad99-573a-42c0-a82d-24b635f89d61
showInAdvancedViewOnly: TRUE
name: NTDS Settings
objectGUID: db0a2e8d-f331-4034-b0a3-f44b9cefc246
options: 1
systemFlags: 33554432
objectCategory: 
CN=NTDS-DSA,CN=Schema,CN=Configuration,DC=astrointernal,DC=com
msDS-Behavior-Version: 4
hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
hasMasterNCs: DC=astrointernal,DC=com
msDS-HasDomainNCs: DC=astrointernal,DC=com
msDS-hasMasterNCs: CN=Configuration,DC=astrointernal,DC=com
msDS-hasMasterNCs: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
msDS-hasMasterNCs: DC=astrointernal,DC=com
hasPartialReplicaNCs: DC=DomainDnsZones,DC=astrointernal,DC=com
hasPartialReplicaNCs: DC=ForestDnsZones,DC=astrointernal,DC=com
whenChanged: 20120611165840.0Z
uSNChanged: 4304
distinguishedName: CN=NTDS 
Settings,CN=ASTRODC2,CN=Servers,CN=Default-First-Si
  te-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com

# returned 2 records
# 2 entries
# 0 referrals

root at adc2--/opt/samba4/private\>> ldbsearch -H ./sam.ldb 
"(objectclass=crossref)" --cross-ncs
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'sasl-DIGEST-MD5' registered
GENSEC backend 'schannel' registered
GENSEC backend 'spnego' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
# record 1
dn: 
CN=22e44e25-1790-4367-ac76-2d5cdaea1178,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: crossRef
cn: 22e44e25-1790-4367-ac76-2d5cdaea1178
instanceType: 4
whenCreated: 20120611165729.0Z
uSNCreated: 4296
showInAdvancedViewOnly: TRUE
name: 22e44e25-1790-4367-ac76-2d5cdaea1178
objectGUID: 081959c5-f173-4c20-ad3e-5426a9a1c845
dnsRoot: ForestDnsZones.astrointernal.com
systemFlags: 5
objectCategory: 
CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
  m
msDS-NC-Replica-Locations: CN=NTDS 
Settings,CN=ASTRODC1,CN=Servers,CN=Default-
  First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
whenChanged: 20120611165828.0Z
uSNChanged: 4297
distinguishedName: 
CN=22e44e25-1790-4367-ac76-2d5cdaea1178,CN=Partitions,CN=Co
  nfiguration,DC=astrointernal,DC=com

# record 2
dn: 
CN=3b0bb6e8-82d5-4ebf-9b89-7b5de783516e,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: crossRef
cn: 3b0bb6e8-82d5-4ebf-9b89-7b5de783516e
instanceType: 4
whenCreated: 20120611165729.0Z
uSNCreated: 4295
showInAdvancedViewOnly: TRUE
name: 3b0bb6e8-82d5-4ebf-9b89-7b5de783516e
objectGUID: 4b33edf5-12c9-40c5-8f90-06571e2d47df
dnsRoot: DomainDnsZones.astrointernal.com
systemFlags: 5
objectCategory: 
CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
  m
msDS-NC-Replica-Locations: CN=NTDS 
Settings,CN=ASTRODC1,CN=Servers,CN=Default-
  First-Site-Name,CN=Sites,CN=Configuration,DC=astrointernal,DC=com
whenChanged: 20120611165828.0Z
uSNChanged: 4298
distinguishedName: 
CN=3b0bb6e8-82d5-4ebf-9b89-7b5de783516e,CN=Partitions,CN=Co
  nfiguration,DC=astrointernal,DC=com

# record 3
dn: CN=Enterprise 
Configuration,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: crossRef
cn: Enterprise Configuration
instanceType: 4
whenCreated: 20120425124934.0Z
whenChanged: 20120425124934.0Z
nCName: CN=Configuration,DC=astrointernal,DC=com
uSNCreated: 1644
uSNChanged: 1644
showInAdvancedViewOnly: TRUE
name: Enterprise Configuration
objectGUID: 4217fbf4-7f3f-4070-adcf-5e864ee71fa1
dnsRoot: astrointernal.com
systemFlags: 1
objectCategory: 
CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
  m
distinguishedName: CN=Enterprise 
Configuration,CN=Partitions,CN=Configuration,
  DC=astrointernal,DC=com

# record 4
dn: CN=Enterprise 
Schema,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: crossRef
cn: Enterprise Schema
instanceType: 4
whenCreated: 20120425124934.0Z
whenChanged: 20120425124934.0Z
nCName: CN=Schema,CN=Configuration,DC=astrointernal,DC=com
uSNCreated: 1645
uSNChanged: 1645
showInAdvancedViewOnly: TRUE
name: Enterprise Schema
objectGUID: 364e1d13-6ad0-43ee-a48e-15de0d8e09fc
dnsRoot: astrointernal.com
systemFlags: 1
objectCategory: 
CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
  m
distinguishedName: CN=Enterprise 
Schema,CN=Partitions,CN=Configuration,DC=astr
  ointernal,DC=com

# record 5
dn: CN=ASTROINTERNAL,CN=Partitions,CN=Configuration,DC=astrointernal,DC=com
objectClass: top
objectClass: crossRef
cn: ASTROINTERNAL
instanceType: 4
whenCreated: 20120425124934.0Z
whenChanged: 20120425124934.0Z
nCName: DC=astrointernal,DC=com
uSNCreated: 1646
uSNChanged: 1646
showInAdvancedViewOnly: TRUE
name: ASTROINTERNAL
objectGUID: 7f239948-1254-40a1-8ac0-75fdecc64b23
dnsRoot: astrointernal.com
nETBIOSName: ASTROINTERNAL
nTMixedDomain: 0
systemFlags: 3
objectCategory: 
CN=Cross-Ref,CN=Schema,CN=Configuration,DC=astrointernal,DC=co
  m
msDS-Behavior-Version: 2
distinguishedName: 
CN=ASTROINTERNAL,CN=Partitions,CN=Configuration,DC=astroint
  ernal,DC=com

# returned 5 records
# 5 entries
# 0 referrals

More information about the samba-technical mailing list