ForestDnsZones error when demoting a W2003 DC

["Dr. Hansjörg Maurer"]

Hi

we are trying to replace a w2003 DC with a samba4 dc (4.1.4 with BIND9_DLZ)

The domainlevel was raised to 2003 before samba4 joins the domain

[root at server01 ~]# samba-tool domain level show
Domain and forest function level for domain 'DC=ags,DC=local'

Forest function level: (Windows) 2003
Domain function level: (Windows) 2003
Lowest function level of a DC: (Windows) 2003

Join, DNS  ets seems to work
samba_dnsupdate shows now error
samba-tool fsmo seize --role=all
works to

When wir try to demote the w2003 server, we get an error, that no other
DC for the transfer of DC=ForestDnsZones,DC=ags,DC=local
could be found

I tried to compare with MSC DNS Admin the DNS Zones
and found, that under w2003 there where two entries
 Standardname-des-ersten-Standorts._sites.ForestDnsZones.ags.local
dns
ForestDnsZones.ags.local
which were not availiable under the samba dns.

When I try to replicate the zone from the w2003 DC to the samba DC
I get
 
[root at server01 ~]# samba-tool drs replicate agsrv.ags.local
server01.ags.local "DC=ForestDnsZones,DC=ags,DC=local"
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
drsException: DsReplicaSync failed (8452, 'WERR_DS_DRA_NO_REPLICA')
  File "/usr/lib64/python2.6/site-packages/samba/netcmd/drs.py", line
345, in run
    drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle,
source_dsa_guid, NC, req_options)
  File "/usr/lib64/python2.6/site-packages/samba/drs_utils.py", line 83,
in sendDsReplicaSync
    raise drsException("DsReplicaSync failed %s" % estr)

the other way around samba-> W2003 the replication works

The same affects the DC=DomainDnsZones,DC=ags,DC=local zone

What could be the reason for this errors

ragards

Hansjörg Maurer