Failed to prepare commit of transaction: DRS linked attribute for GUID

[denis.shigapov]

Hi
A patch can be rolled into a working samba, or you need to recompile
and reinstall the package?

В Вт, 05/09/2017 в 10:11 +1200, Tim Beale via samba-technical пишет:
> Hi,
> 
> We've seen this problem before when inter-operating with Microsoft.
> See:
> https://lists.samba.org/archive/samba/2017-June/209020.html
> 
> The patch that should fix this has been delivered to master. However,
> unless we backport the related patches, it won't be in a Samba
> release
> until 4.8.
> https://git.samba.org/?p=samba.git;a=commit;h=f87332eb35638cc38f83c58
> 0d4623ab978088601
> 
> In the meantime you could try running 'samba-tool drs replicate
> --local'. This should set the GET_ANC flag in the request, which
> should
> hopefully avoid this problem.
> 
> However, note that when inter-operating between Windows and Samba you
> could still potentially get cases where replication succeeds, but
> linked
> attributes are dropped (because Samba doesn't know how about the
> target
> object yet). This should be fixed now in the latest master branch.
> 
> Cheers,
> Tim
> 
> On 04/09/17 23:45, denis.shigapov via samba-technical wrote:
> > 
> > There is a domain controller on windows 2008R2, DC samba Version
> > 4.6.5
> > is connected to it. After renaming the user to make mistakes:
> > 
> > [2017/09/04 10:04:54.528818,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> > Failed to re-resolve GUID f5d7a9b2-981c-49c9-a262-f3ca4c90272a -
> > using
> > CN=Пользовтаель Пользоватеть,OU=Users Shop M,DC=euro,DC=ru
> > [2017/09/04 10:04:54.547960,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> > Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
> > using
> > CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> > Office,DC=euro,DC=ru
> > [2017/09/04 10:04:54.615598,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271:
> > WARNING: 
> > Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
> > using
> > CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> > Office,DC=euro,DC=ru
> > [2017/09/04 10:04:54.622398,  0]
> > ../source4/dsdb/repl/replicated_objects.c:933(dsdb_replicated_objec
> > ts_c
> > ommit)
> >   ../source4/dsdb/repl/replicated_objects.c:933 Failed to prepare
> > commit of transaction: DRS linked attribute for GUID bf04e179-4c7c-
> > 4cf9-b7a3-d37b287b1f3e - DN not found
> > [2017/09/04 10:04:54.629436,  0]
> > ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_sourc
> > e_ap
> > ply_changes_trigger)
> >   Failed to commit objects:
> > WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
> > 
> > 
> > 
> > I tried to start synchronization and got:
> > 
> > samba-tool drs replicate srv-m-dc.euro.ru srv-o.euro.ru OU=Users\
> > Shop\
> > M,DC=euro,DC=ru
> > ERROR(<class 'samba.drs_utils.drsException'>):
> > DsReplicaSync failed - drsException: DsReplicaSync failed (8440,
> > 'WERR_DS_DRA_BAD_NC')
> >   File "/usr/lib64/python2.7/site-
> > packages/samba/netcmd/drs.py", line 368, in run
> >    
> > drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
> > source_dsa_guid, NC, req_options)
> >   File "/usr/lib64/python2.7/site-
> > packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
> >     raise
> > drsException("DsReplicaSync failed %s" % estr)
> > 
> 
>