More KCC patches

Denis Cardon denis.cardon at
Wed Jun 10 15:12:38 MDT 2015

Hi Douglas and Andrew,

> On Wed, 2015-06-10 at 18:20 +1200, Douglas Bagnall wrote:
>> The final KCC patches from that unreasonable clump are here:
>> They have all been reviewed by Garming, except for these few that have
>> changed since he looked:
>> Could someone please review?
> Thanks Douglas.  I reviewed the whole series in the office, so consider
> those 'Reviewed-by: Andrew Bartlett <abartlet at>', but we just
> need a second team reviewer for those linked above.
>> This leaves the old KCC in charge. At some point we would like to
>> switch over to the new KCC, but in the meantime we will only be
>> testing on specially selected victims. Any volunteers?
> Indeed, that is what we really need at this point.  We also need help
> from folks willing to submit sample network topologies of Samba or
> Windows networks.

Just to be sure, in order to test the new kcc, the only thing to add to 
smb.conf file is kccsrv:samba_kcc = true ?

I checked out the kcc-intersite-29 branch on a 2 samba DCs replicating 
the same domain (upgraded from 4.2.0):
  git clone git://
  git checkout kcc-intersite-29
  git branch
      * kcc-intersite-29
  make install

Then change smb.conf with kccsrv:samba_kcc = true and restart samba

[root at srvads.tranq samba]# samba -V
Version 4.3.0pre1-GIT-46431e3

There is no visible regression, everything is working fine and 
replication is ok both ways.

However I have two issues when trying the new samba_kcc:

If I remove the connection object from the console "site and services 
active directory", and run samba_kcc by hand, I get 10 "loopback" 
replication connections automatically created... (cf. attachment). The 
mmc display looks coherent with what samba-tool drs showrepl says.

The test domain has seen almost all the samba releases from the late 
beta onward (and had quite a tumultuous life), so perhaps I'll try 
tomorow on a more pristine domain...

Another thing : if I delete all the automatically created connexion and 
then create the connexion by hand, replication is working fine, however, 
when running samba_kcc, I then get the following error :

[root at srvads.tranq samba]# samba_kcc
'module' object has no attribute 'replSchedule'

Taking a look at the drsblobs object :

 >>> drsblobs.replSchedule
Traceback (most recent call last):
   File "<console>", line 1, in <module>
AttributeError: 'module' object has no attribute 'replSchedule'
 >>> drsblobs
<module 'samba.dcerpc.drsblobs' from 
 >>> dir(drsblobs)
['AuthInfoClear', 'AuthInfoNT4Owf', .... , 'schedule', .... ]

The drsblobs object has a "schedule" attribute but not a "replSchedule", 
which is actually coherent with the ./librpc/idl/drsblobs.idl file from 
my checkout. Perhaps I have messed up with my git tree...

By the way, looking a the kcc computation logic code, it is really mind 
bloggling! Keep on the good job!



> Andrew Bartlett

Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Capture-11.png
Type: image/png
Size: 15065 bytes
Desc: not available
URL: <>

More information about the samba-technical mailing list