Andrew Bartlett abartlet at
Fri Jul 21 09:29:26 UTC 2017

I've now seen the imfamous BAD_NET_RESP error in a short run of make
test, using my faster-drs-krb5-ccache-p-im branch.

I run make test TESTS="repl drs"

In st/vampire_dc/samba_test.log I see:

../source4/dsdb/common/util.c:4807: Failed to find account dn
(serverReference) for CN=PROMOTEDVDC,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=samba,DC=example,DC=com, parent of
DSA with objectGUID 6f0bc0f7-8e07-42ac-bb07-64fefb3c728b, sid S-1-5-21-
../source4/rpc_server/drsuapi/updaterefs.c:371: Refusing
DsReplicaUpdateRefs for sid S-1-5-21-2961692879-429220407-1585664198-
1167 with GUID 6f0bc0f7-8e07-42ac-bb07-64fefb3c728b

In st/promoted_dc/samba_test.log I see:

UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for

In st/ad_dc_ntvfs/samba_test.log I don't see anything.

I'm thinking the GET_TGT work should help fix this.

I have the full st/ dir kept aside for reference.

Andrew Bartlett

Andrew Bartlett             
Authentication Developer, Samba Team
Samba Developer, Catalyst IT

More information about the samba-technical mailing list