Join and Replication after Exchange

Evgeny Sinelnikov sin at altlinux.org
Tue Aug 15 12:39:12 UTC 2017 

Hello,

I got next replication problems with old Exchange objects in log.samba
at first start after join samba-4.6.7 as domain controller (samba-tool
domain join process lasted nine hours):

.,.
[2017/08/15 10:50:07.492165,  3]
../source4/nbt_server/register.c:155(nbtd_register_name_handler)
  Registered DP<00> with 10.10.51.101 on interface 10.10.51.255
[2017/08/15 10:50:18.516937,  3]
../libcli/nbt/lmhosts.c:184(resolve_lmhosts_file_as_sockaddr)
  resolve_lmhosts: Attempting lmhosts lookup for name
eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru<0x20>
[2017/08/15 10:50:18.518449,  2]
../source4/dsdb/kcc/kcc_periodic.c:711(kccsrv_samba_kcc)
  Calling samba_kcc script
[2017/08/15 10:50:18.529881,  1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
  Doing a full scan on DC=ForestDnsZones,DC=dp,DC=mosreg,DC=ru and
looking for deleted objects
[2017/08/15 10:50:18.535810,  3]
../libcli/nbt/lmhosts.c:184(resolve_lmhosts_file_as_sockaddr)
  resolve_lmhosts: Attempting lmhosts lookup for name
eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru<0x20>
[2017/08/15 10:50:18.542427,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2017/08/15 10:50:18.545118,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ KR01-DC-ALT-01$@DP.MOSREG.RU from
ipv4:10.10.51.101:43912 for krbtgt/DP.MOSREG.RU at DP.MOSREG.RU
[2017/08/15 10:50:18.554388,  1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
  Doing a full scan on DC=DomainDnsZones,DC=dp,DC=mosreg,DC=ru and
looking for deleted objects
[2017/08/15 10:50:18.576183,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: No preauth found, returning PREAUTH-REQUIRED --
KR01-DC-ALT-01$@DP.MOSREG.RU
[2017/08/15 10:50:18.614649,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ KR01-DC-ALT-01$@DP.MOSREG.RU from
ipv4:10.10.51.101:58684 for krbtgt/DP.MOSREG.RU at DP.MOSREG.RU
[2017/08/15 10:50:18.634657,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client sent patypes: encrypted-timestamp
[2017/08/15 10:50:18.634685,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for PKINIT pa-data -- KR01-DC-ALT-01$@DP.MOSREG.RU
[2017/08/15 10:50:18.634698,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Looking for ENC-TS pa-data -- KR01-DC-ALT-01$@DP.MOSREG.RU
[2017/08/15 10:50:18.634956,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: ENC-TS Pre-authentication succeeded --
KR01-DC-ALT-01$@DP.MOSREG.RU using aes256-cts-hmac-sha1-96
[2017/08/15 10:50:19.804519,  1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
  Doing a full scan on DC=dp,DC=mosreg,DC=ru and looking for deleted objects
[2017/08/15 10:50:19.835292,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: AS-REQ authtime: 2017-08-15T10:50:18 starttime: unset
endtime: 2017-08-15T20:50:18 renew till: 2017-08-22T10:50:18
[2017/08/15 10:50:19.835363,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96,
aes128-cts-hmac-sha1-96, des3-cbc-sha1, des3-cbc-md5,
arcfour-hmac-md5, using
aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
[2017/08/15 10:50:19.835389,  3]
../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Requested flags: renewable, forwardable
[2017/08/15 10:50:19.835828,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'kdc_tcp_call_loop:
tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
[2017/08/15 10:50:19.835849,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[kdc_tcp_call_loop:
tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED]
[2017/08/15 10:50:19.970107,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
[2017/08/15 10:50:19.982903,  3]
../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:86(dcesrv_drsuapi_DsBind)
  ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:86: doing DsBind with
system_session
[2017/08/15 10:50:19.993942,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(0a0c6920-60b3-47ce-b215-0f976e17e1db, DC=dp,DC=mosreg,DC=ru,
eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru)
[2017/08/15 10:50:33.014290,  0]
../source4/rpc_server/common/forward.c:51(dcesrv_irpc_forward_callback)
  IRPC callback failed for DsReplicaSync - NT_STATUS_IO_TIMEOUT
[2017/08/15 10:50:33.014431,  2]
default/librpc/gen_ndr/ndr_drsuapi_s.c:395(drsuapi__op_reply)
  dcerpc_fault DCERPC_FAULT_CANT_PERFORM in drsuapi_DsReplicaSync
[2017/08/15 10:50:33.017083,  3]
../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:86(dcesrv_drsuapi_DsBind)
  ../source4/rpc_server/drsuapi/dcesrv_drsuapi.c:86: doing DsBind with
system_session
[2017/08/15 10:50:36.395088,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 9 objects (0 linked attributes) for
DC=ForestDnsZones,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:50:36.444309,  0]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:2340(replmd_modify_la_delete)
  Deleting deleted linked attribute homeMDB to
30d9b676-5d9b-44b2-a732-7d036c64d6c9, because vanish_links control is
set
[2017/08/15 10:50:36.445032,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:394(replmd_process_backlink)
  WARNING: backlink from CN=DAG02-DB04,CN=Databases,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru already
removed from CN=Приемная XXXX,OU=Old_Users,OU=Комитет
XXX,OU=Комитеты,OU=Органы XXXX,DC=dp,DC=mosreg,DC=ru - attribute
'homeMDBBL': no matching attribute value while deleting attribute on
'CN=DAG02-DB04,CN=Databases,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru'
[2017/08/15 10:50:36.445123,  0]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:2340(replmd_modify_la_delete)
  Deleting deleted linked attribute msExchAddressBookPolicyLink to
3d7298e0-9ec0-49a1-9a4f-f26a202920d6, because vanish_links control is
set
[2017/08/15 10:50:36.445526,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:394(replmd_process_backlink)
...

[2017/08/15 10:50:51.356987,  0]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:2340(replmd_modify_la_delete)
  Deleting deleted linked attribute homeMDB to
e759a353-992c-4a46-a052-a86a16ab7fae, because vanish_links control is
set
[2017/08/15 10:50:51.357555,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:394(replmd_process_backlink)
  WARNING: backlink from CN=DAG02-DB01,CN=Databases,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru already
removed from CN=XXXX XXXX XXXX,OU=Users,OU=Уполномоченный XXXX,OU=XXXX
органы,OU=Органы XXXX,DC=dp,DC=mosreg,DC=ru - attribute 'homeMDBBL':
no matching attribute value while deleting attribute on
'CN=DAG02-DB01,CN=Databases,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru'
[2017/08/15 10:50:51.357627,  0]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:2340(replmd_modify_la_delete)
  Deleting deleted linked attribute msExchRBACPolicyLink to
6917f557-201f-4544-b808-94cc89d5b62d, because vanish_links control is
set
[2017/08/15 10:50:51.359305,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:394(replmd_process_backlink)
  WARNING: backlink from CN=Default Role Assignment
Policy,CN=Policies,CN=RBAC,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru already
removed from CN=XXXX XXXX XXXX,OU=Users,OU=Уполномоченный XXXX,OU=XXXX
органы,OU=Органы XXXX,DC=dp,DC=mosreg,DC=ru - attribute
'msExchRBACPolicyBL': no matching attribute value while deleting
attribute on 'CN=Default Role Assignment
Policy,CN=Policies,CN=RBAC,CN=DP,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=dp,DC=mosreg,DC=ru'
[2017/08/15 10:50:51.370866,  1]
../source4/dsdb/kcc/garbage_collect_tombstones.c:68(garbage_collect_tombstones_part)
  Doing a full scan on CN=Configuration,DC=dp,DC=mosreg,DC=ru and
looking for deleted objects
[2017/08/15 10:50:52.156495,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb
[2017/08/15 10:50:52.156854,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc: Traceback (most recent call last):
[2017/08/15 10:50:52.156881,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:   File "/usr/sbin/samba_kcc", line 337, in <module>
[2017/08/15 10:50:52.156905,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:
attempt_live_connections=opts.attempt_live_connections)
[2017/08/15 10:50:52.156928,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:   File
"/usr/lib64/python2.7/site-packages/samba/kcc/__init__.py", line 2650,
in run
[2017/08/15 10:50:52.156977,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:     self.translate_ntdsconn()
[2017/08/15 10:50:52.157001,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:   File
"/usr/lib64/python2.7/site-packages/samba/kcc/__init__.py", line 1042,
in translate_ntdsconn
[2017/08/15 10:50:52.157027,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:     n_rep.commit_repsFrom(self.samdb)
[2017/08/15 10:50:52.157049,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:   File
"/usr/lib64/python2.7/site-packages/samba/kcc/kcc_utils.py", line 396,
in commit_repsFrom
[2017/08/15 10:50:52.157071,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc:     (self.nc_dnstr, estr))
[2017/08/15 10:50:52.157093,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc: samba.kcc.kcc_utils.KCCError: Could not set
repsFrom for (DC=dp,DC=mosreg,DC=ru) - ((65, "objectclass_attrs:
attribute 'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru'
does not exist in the specified objectclasses!"))
[2017/08/15 10:50:52.157162,  3]
../lib/util/util_runcmd.c:296(samba_runcmd_io_handler)
  Child /usr/sbin/samba_kcc exited with status 1
[2017/08/15 10:50:52.157249,  0]
../source4/dsdb/kcc/kcc_periodic.c:694(samba_kcc_done)
  ../source4/dsdb/kcc/kcc_periodic.c:694: Failed samba_kcc -
NT_STATUS_ACCESS_DENIED
[2017/08/15 10:55:04.214844,  3]
../source4/smbd/service_stream.c:66(stream_terminate_connection)
  Terminating connection - 'dcesrv: NT_STATUS_CONNECTION_DISCONNECTED'
[2017/08/15 10:55:04.214895,  3]
../source4/smbd/process_single.c:114(single_terminate)
  single_terminate: reason[dcesrv: NT_STATUS_CONNECTION_DISCONNECTED]
[2017/08/15 10:55:18.557890,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=ForestDnsZones,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:18.603617,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
DC=DomainDnsZones,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:18.623839,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Schema,CN=Configuration,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:18.661123,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for
CN=Configuration,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:18.722053,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:18.740877,  0]
../source4/dsdb/common/util.c:3283(dsdb_savereps)
  Failed to store repsFrom - objectclass_attrs: attribute
'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru' does not
exist in the specified objectclasses!
[2017/08/15 10:55:18.741248,  2]
../source4/dsdb/repl/drepl_out_pull.c:85(drepl_reps_update)
  drepl_reps_update: Failed to save repsFrom for
DC=dp,DC=mosreg,DC=ru: WERR_DS_DRA_INTERNAL_ERROR
[2017/08/15 10:55:25.709764,  3]
../source4/dsdb/repl/drepl_service.c:203(_drepl_schedule_replication)
  _drepl_schedule_replication: forcing sync of partition
(0a0c6920-60b3-47ce-b215-0f976e17e1db, DC=dp,DC=mosreg,DC=ru,
eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru)
[2017/08/15 10:55:26.724013,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:55:26.740267,  0]
../source4/dsdb/common/util.c:3283(dsdb_savereps)
  Failed to store repsFrom - objectclass_attrs: attribute
'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru' does not
exist in the specified objectclasses!
[2017/08/15 10:55:26.740743,  2]
../source4/dsdb/repl/drepl_out_pull.c:85(drepl_reps_update)
  drepl_reps_update: Failed to save repsFrom for
DC=dp,DC=mosreg,DC=ru: WERR_DS_DRA_INTERNAL_ERROR
...

[2017/08/15 11:01:32.045018,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2623(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2623: Failed UpdateRefs
on <GUID=0a0c6920-60b3-47ce-b215-0f976e17e1db>;<SID=S-1-5-21-698140489-3825754665-3897753990>;DC=dp,DC=mosreg,DC=ru
for eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru in
DsGetNCChanges - WERR_DS_DRA_INTERNAL_ERROR
[2017/08/15 11:01:32.063977,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2030(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2030: DsGetNCChanges
2nd replication on DN DC=dp,DC=mosreg,DC=ru older highwatermark
(last_dn CN=XXXX XXXX XXXX,OU=Users,OU=Администрации
XXXX,OU=ОрганыXXX,DC=dp,DC=mosreg,DC=ru)
[2017/08/15 11:01:32.064642,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1526(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1526: getncchanges on
DC=dp,DC=mosreg,DC=ru using filter (uSNChanged>=1)
[2017/08/15 11:01:38.339046,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 0 objects (0 linked attributes) for DC=dp,DC=mosreg,DC=ru
[2017/08/15 11:01:43.001466,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2602(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for eb2d1557-6bd7-45d5-8864-e74073ef6752
[2017/08/15 11:01:43.047716,  0]
../source4/dsdb/common/util.c:3283(dsdb_savereps)
  Failed to store repsTo - objectclass_attrs: attribute
'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru' does not
exist in the specified objectclasses!
[2017/08/15 11:01:43.048062,  0]
../source4/rpc_server/drsuapi/updaterefs.c:217(drsuapi_UpdateRefs)
  Failed to add repsTo for eb2d1557-6bd7-45d5-8864-e74073ef6752:
WERR_DS_DRA_INTERNAL_ERROR
[2017/08/15 11:01:43.048645,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2623(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2623: Failed UpdateRefs
on <GUID=0a0c6920-60b3-47ce-b215-0f976e17e1db>;<SID=S-1-5-21-698140489-3825754665-3897753990>;DC=dp,DC=mosreg,DC=ru
for eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru in
DsGetNCChanges - WERR_DS_DRA_INTERNAL_ERROR
[2017/08/15 11:01:43.053568,  3]
../lib/ldb-samba/ldb_wrap.c:325(ldb_wrap_connect)
  ldb_wrap open of secrets.ldb
...


I think that is same old problem with linked attributes from extended
schema like it was in drsuapi implementation:
https://bugzilla.samba.org/show_bug.cgi?id=11758

Some problems like  WARNING: backlink from ...,DC=ru - attribute
'msExchRBACPolicyBL': no matching attribute value while deleting
attribute on ...,DC=ru' looks as not critical.

Main problem is that some attributes from extended schema not found in
dsdb object classes:
...
[2017/08/15 10:50:52.157093,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_kcc: samba.kcc.kcc_utils.KCCError: Could not set
repsFrom for (DC=dp,DC=mosreg,DC=ru) - ((65, "objectclass_attrs:
attribute 'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru'
does not exist in the specified objectclasses!"))
...

On replication proccess we got same problem:
...
[2017/08/15 10:57:13.147159,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1526(getncchanges_collect_objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1526: getncchanges on
DC=dp,DC=mosreg,DC=ru using filter (uSNChanged>=1)
[2017/08/15 10:57:19.534396,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_commit)
  Replicated 1 objects (0 linked attributes) for
CN=Configuration,DC=dp,DC=mosreg,DC=ru
[2017/08/15 10:57:24.001701,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2602(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for eb2d1557-6bd7-45d5-8864-e74073ef6752
[2017/08/15 10:57:24.047619,  0]
../source4/dsdb/common/util.c:3283(dsdb_savereps)
  Failed to store repsTo - objectclass_attrs: attribute
'msExchDomainRestrictionBL' on entry 'DC=dp,DC=mosreg,DC=ru' does not
exist in the specified objectclasses!
[2017/08/15 10:57:24.047758,  0]
../source4/rpc_server/drsuapi/updaterefs.c:217(drsuapi_UpdateRefs)
  Failed to add repsTo for eb2d1557-6bd7-45d5-8864-e74073ef6752:
WERR_DS_DRA_INTERNAL_ERROR
[2017/08/15 10:57:24.048322,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2623(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2623: Failed UpdateRefs
on <GUID=0a0c6920-60b3-47ce-b215-0f976e17e1db>;<SID=S-1-5-21-698140489-3825754665-3897753990>;DC=dp,DC=mosreg,DC=ru
for eb2d1557-6bd7-45d5-8864-e74073ef6752._msdcs.dp.mosreg.ru in
DsGetNCChanges - WE
RR_DS_DRA_INTERNAL_ERROR
...

So, I need to understand how to debug it. How to get full list of
attributes initialized at startup and used by
dsdb_attribute_by_lDAPDisplayName()?

[sin at tor samba.git]$ git grep "does not exist in the specified
objectclasses!" | cat
source4/dsdb/samdb/ldb_modules/objectclass_attrs.c:
         ldb_asprintf_errstring(ldb, "objectclass_attrs: attribute
'%s' on entry '%s' does not exist in the specified objectclasses!",


-- 
Sin (Sinelnikov Evgeny)

More information about the samba-technical mailing list