GetNCChanges DRS_GET_TGT

[Stefan Metzmacher]

Am 03.03.2017 um 09:03 schrieb Andrew Bartlett:
> G'Day Metze,
> 
> Recently we diagnosed with a client an interesting replication
> corruption, due to the spread of replication over multiple chunks, but
> the delay of link values until the end. 
> 
> Because we don't implement DRS_GET_TGT the DRS server simply delays all
> links until the end of replication, but that means they do not get
> committed until after the object they relate to.  This means they can
> be lost if the replication cycle breaks for any reason.

Why do you think that?
The destination dsa should typically just retry in the next time.
As the source dsa only returns the final highwatermark and uptodatevector
in the final response and these reflect the state at the start of the cycle.

> As such, I think (and I'm sure you agree) Samba needs to implement
> DRS_GET_TGT, and I my team at Catalyst will probably take this on very
> soon.  This mail is as a heads-up, and to ensure we know about any of
> your great work in progress, in case we can build on that.  Otherwise
> my gut feeling is that the GET_ANC patch should serve as a good basis.

It would be good to correctly implement the replication of linked
attributes similar as Windows. It can certainly happen
that an object has missing links for the time until the next replication.
In that case the object may also violate the schema restrictions
and miss group memberships.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170303/28efd639/signature.sig>