samba as AD corrupt groups

Alexis Pellicier alexis.pellicier at nds.k12.tr
Thu Dec 21 13:50:03 UTC 2017


​Hi,

I'm using two samba servers for the active directory of my school​ one as
domain controller and the second as backup domain controller. Recently I
realize that for some of my groups several members had been dropped. Other
one are duplicate. As of the result of this command:

------
ldbsearch -H sam.ldb cn=U_visu

member: CN=tulay,
​​CN=Users,DC=ilkokul

​​
member: CN=tulay,
​​CN=Users,DC=​ilkokul

member: CN=semaoz,
​​
​​CN=Users,DC=ilkokul


​I tried samba-tool dbcheck which gave me lots of error​s relative to these
groups but was not able to fix it even though it said it does.

-------
samba-tool dbcheck --fix

ERROR: orphaned backlink attribute 'memberOf' in
CN=tulay,CN=Users,DC=ilkokul,DC=nds,DC=k12,DC=tr for link member in
CN=U_visu,CN=Users,DC=ilkokul,DC=nds,DC=k12,DC=tr
Remove orphaned backlink memberOf [YES]
Fixed orphaned backlink memberOf


​For now I'm considering restorate from a backup but the warnings there:
https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC push
me to ask on this list before doing anything else.

I'm using samba Version 4.7.3 and any help would be greatly appreciated.

Thanks.


More information about the samba-technical mailing list