Replication problems

[Lucas James]

G'Day all,

I've been trying to get my two Samba4 DCs to replicate between each
other, however I seem to get them to do any automatic replication.

The only replication I've been able to achive is drs replicate --local
option (in both directions).

First off:

root at ns0:/usr/local/samba # uname -a
FreeBSD ns1.ldjcs.com.au 9.1-PRERELEASE FreeBSD 9.1-PRERELEASE #0
r244810: Sat Dec 29 15:45:35 EST 2012
     root at supa.ldjcs.com.au:/usr/obj/usr/src/sys/GENERIC  amd64

root at ns1:/usr/local/samba # sbin/samba --version
Version 4.1.0pre1-GIT-013139e

ns0.ldjcs.com.au is the primary DC (203.17.30.32) and ns1.ldjcs.com.au
is the backup DC (.18), otherwise identically configured.



The output of the samba-tool drs showrepl command:

root at ns0:/usr/local/samba # bin/samba-tool drs showrepl ns0
Default-First-Site-Name\NS0
DSA Options: 0x00000001
DSA object GUID: 3b0c70a3-2ecf-4fd9-b87d-7fd2fc063d1f
DSA invocationId: cd9f36c5-30ad-4b1c-a35a-ba807406b34c
==== INBOUND NEIGHBORS ====
ERROR(runtime): DsReplicaGetInfo of type 0 failed - (-1073610723,
'NT_STATUS_RPC_PROTOCOL_ERROR')

In the log.samba:

IRPC callback failed for DsReplicaGetInfo - NT_STATUS_IO_TIMEOUT
dcerpc_fault WERR_EPT_S_CANT_PERFORM_OP in drsuapi_DsReplicaGetInfo


I'm also getting RID allocation fails (which may or may not be related):

Mapped to DCERPC endpoint 135
added interface em0 ip=203.17.30.18 bcast=203.17.30.255
netmask=255.255.255.0
added interface em0 ip=203.17.30.18 bcast=203.17.30.255
netmask=255.255.255.0
dns child failed to find name
'3b0c70a3-2ecf-4fd9-b87d-7fd2fc063d1f._msdcs.ldjcs.com.au' of type A
dreplsrv_op_pull_source(WERR_BADFILE) for CN=RID
Manager$,CN=System,DC=ldjcs,DC=com,DC=au
../source4/dsdb/repl/drepl_ridalloc.c:43: RID Manager failed RID
allocation - WERR_BADFILE - extended_ret[0x0]

It would seem that I have a strange dns problem, (I'm using the internal
dns server):

root at ns1:/usr/local/samba # nslookup
3b0c70a3-2ecf-4fd9-b87d-7fd2fc063d1f._msdcs.ldjcs.com.au
Server: 203.17.30.32
Address: 203.17.30.32#53

3b0c70a3-2ecf-4fd9-b87d-7fd2fc063d1f._msdcs.ldjcs.com.au canonical name
= ns0.ldjcs.com.au.
Name: ns0.ldjcs.com.au
Address: 203.17.30.32

root at ns1:/usr/local/samba # bin/samba-tool dns query ns1 ldjcs.com.au
3b0c70a3-2ecf-4fd9-b87d-7fd2fc063d1f._msdcs.ldjcs.com.au A
ERROR(runtime): uncaught exception - (9714,
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
 File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
 return self.run(*args, **kwargs)
 File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/dns.py", line
974, in run
 None, record_type, select_flags, None, None)

Apart from these errors, everything else seems to work OK.

The log file is available at: 
http://www.ldjcs.com.au/wp-content/uploads/2013/01/samba.d7.txt
I'll keep notes on my blog at:
http://www.ldjcs.com.au/2013/01/samba4-replication-problems/

regards,
Lucas

--
I was going to include a witty saying,
but I couldn't think of one.