[Samba] Failure demoting 2008_R2 DC (S4rc5)

[Thomas Simmons]

Hello,

We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am
able to duplicate this issue with both classicupgrade and a new provision
(both cases using internal DNS). I am able to join a 2008R2 system to the
domain and promote it to a DC, however I am unable to demote it. The
problem appears to be that the 2008R2 server fails replicating to the S4
DC. The specific error that I receive on the Windows server is:

The operation failed because:

Active Directory Domain Services could not transfer the remaining data in
the directory partition
CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com to
Active Directory Domain Controller adc1.internal.testdom.com

I receive the following when trying to replicate using samba-tool (adc1=S4
adc2=2008R2):

[root at ADC1 etc]# samba-tool drs replicate adc2 adc1
CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator

 Password for [TESTDOM\Administrator]:
Replicate from adc1 to adc2 was successful.
[root at ADC1 etc]# samba-tool drs replicate adc1 adc2
CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
Password for [TESTDOM\Administrator]:
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
  File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py", line
334, in run
    drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle,
source_dsa_guid, NC, req_options)
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py",
line 83, in sendDsReplicaSync
    raise drsException("DsReplicaSync failed %s" % estr)
[root at ADC1 etc]#

I am seeing a lot of these entries in my samba log:

[2012/11/20 20:57:48,  3]
../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
  dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
msdcs.internal.testdom.com' of type A
[2012/11/20 20:57:48,  3]
../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
  dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
msdcs.internal.testdom.com' of type A
[2012/11/20 20:57:48,  3]
../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
  dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
msdcs.internal.testdom.com' of type A

Thank you for any assistance.