[Samba] Failure demoting 2008_R2 DC (S4rc5)

[Thomas Simmons]

Hello,

I've found that if I uncheck DNS during dcpromo, I do not experience either
of these problems. Does Samba4 not have the ability to replicate DNS? If
not, what other options are available for AD DNS redundancy across sites?
Also, does anyone know why provisioning a domain as testdom.com or
testdom.local results in the Windows Server not being able to determine the
number of authoritative DNS servers, but it works when using
subdomain.testdom.com? Thanks for any assistance.


On Wed, Nov 21, 2012 at 1:48 PM, Thomas Simmons <twsnnva at gmail.com> wrote:

> Hello,
>
> I re-provisioned my domain from internal.testdom.com to testdom.com to
> see if using a subdomain may be causing my problem. Now I get the following
> error when promoting the Windows 2008R2 machine:
>
> The number of DNS servers registered as authoritative name servers for
> this domain could not be determined. Error: The filename, directory name,
> or volume label syntax is incorrect.
>
> I also tried using testdom.local and the problem persists. It seems that
> anytime I provision the domain as "domain.tld", I get the above error when
> promoting the 2008R2 machine. When I provision as "subdomain.domain.tld",
> Windows detects one authoritative server for the domain (which is correct).
> Thanks for any assistance.
>
>
> On Tue, Nov 20, 2012 at 9:11 PM, Thomas Simmons <twsnnva at gmail.com> wrote:
>
>> Hello,
>>
>> We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am
>> able to duplicate this issue with both classicupgrade and a new provision
>> (both cases using internal DNS). I am able to join a 2008R2 system to the
>> domain and promote it to a DC, however I am unable to demote it. The
>> problem appears to be that the 2008R2 server fails replicating to the S4
>> DC. The specific error that I receive on the Windows server is:
>>
>> The operation failed because:
>>
>> Active Directory Domain Services could not transfer the remaining data in
>> the directory partition
>> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com to
>> Active Directory Domain Controller adc1.internal.testdom.com
>>
>> I receive the following when trying to replicate using samba-tool
>> (adc1=S4 adc2=2008R2):
>>
>> [root at ADC1 etc]# samba-tool drs replicate adc2 adc1
>> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
>>
>>  Password for [TESTDOM\Administrator]:
>> Replicate from adc1 to adc2 was successful.
>> [root at ADC1 etc]# samba-tool drs replicate adc1 adc2
>> CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
>> Password for [TESTDOM\Administrator]:
>> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
>> drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
>>   File
>> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py", line
>> 334, in run
>>     drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle,
>> source_dsa_guid, NC, req_options)
>>   File
>> "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py", line
>> 83, in sendDsReplicaSync
>>     raise drsException("DsReplicaSync failed %s" % estr)
>> [root at ADC1 etc]#
>>
>> I am seeing a lot of these entries in my samba log:
>>
>> [2012/11/20 20:57:48,  3]
>> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
>> msdcs.internal.testdom.com' of type A
>> [2012/11/20 20:57:48,  3]
>> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
>> msdcs.internal.testdom.com' of type A
>> [2012/11/20 20:57:48,  3]
>> ../source4/libcli/resolve/dns_ex.c:489(pipe_handler)
>>   dns child failed to find name 'd3c6d14b-1dce-4dac-b3f5-99d4595d58cc._
>> msdcs.internal.testdom.com' of type A
>>
>> Thank you for any assistance.
>>
>
>