[Samba] Samba 4--Somethings decidedly broken

[Andrew Bartlett]

On Fri, 2010-06-11 at 15:33 -0700, tms3 at tms3.com wrote:
> Hmmm...not quite sure where to go to fix this up.
> 
> Samba 4 PDC, 1 W2K3R2, 1 W2K8R2 additional DC's.  samba.log 
> perpetually spewing:
> 
> [Fri Jun 11 14:47:42 2010 PDT, 0 
> librpc/rpc/dcerpc_util.c:619:dcerpc_pipe_auth_recv()]
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 - 
> NT_STATUS_INVALID_PARAMETER
> [Fri Jun 11 14:47:42 2010 PDT, 0 
> dsdb/repl/drepl_notify.c:189:dreplsrv_notify_op_callback()]
> dreplsrv_notify: Failed to send DsReplicaSync to 
> 58bfc826-cd9f-445d-b6e5-ab7314ba0671._msdcs.tms3.com for 
> CN=Configuration,DC=tms3,DC=com - NT_STATUS_INVALID_PARAMETER
> [Fri Jun 11 14:47:42 2010 PDT, 0 
> librpc/rpc/dcerpc_util.c:619:dcerpc_pipe_auth_recv()]
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 - 
> NT_STATUS_INVALID_PARAMETER
> [Fri Jun 11 14:47:42 2010 PDT, 0 
> dsdb/repl/drepl_notify.c:189:dreplsrv_notify_op_callback()]
> dreplsrv_notify: Failed to send DsReplicaSync to 
> af29c79c-57dc-40f3-bed1-95c3adda4cc8._msdcs.tms3.com for 
> CN=Configuration,DC=tms3,DC=com - NT_STATUS_INVALID_PARAMETER
> 
> As well on the W2K8
> 
> repadmin /replicate <w2k8> <samba4>
> 
> completes
> 
> repadmin /replicate <samba4> <w2k8> gives
> 
> DsReplicaSync() failed with status 8453 (0x2105):
> 
>     Replication access was denied.

Perhaps check to see if anything is stopping Kerberos working between
these hosts?  The auth code for Kerberos will trigger
NT_STATUS_INVALID_PARAMETER (yeah, it is probably not the best choice of
error code) if Kerberos won't work.

Perhaps turn up the debug level and see if there are more clues?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba/attachments/20100612/8a5d452e/attachment.pgp>