[Samba] Global Catalog replication error to win 2008

[Fred Geo]

Hi all,

Running Samba 4.0.0apha18 with good results but getting an error when I attempt to replicate the Global Catalog to a Windows 2008 Machine.

Samba machine = DC1
Windows 2008 machine = DC0

samba-tool Showrepl result:

Default-First-Site-Name\DC1
DSA Options: 0x00000001
DSA object GUID: 05c3c860-0a0d-4672-a39e-a212ccb0ce9c
DSA invocationId: abb0cab3-13d3-456c-8a16-e65a4855a2df

==== INBOUND NEIGHBORS ====

DC=ForestDnsZones,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:53 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:53 2013 MDT

DC=DomainDnsZones,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:54 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:54 2013 MDT

DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:54 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:54 2013 MDT

CN=Schema,CN=Configuration,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:55 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:55 2013 MDT

CN=Configuration,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:55 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:55 2013 MDT

==== OUTBOUND NEIGHBORS ====

DC=ForestDnsZones,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:34 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:34 2013 MDT

DC=DomainDnsZones,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:15:34 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:15:34 2013 MDT

DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 17:02:31 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 17:02:31 2013 MDT

CN=Schema,CN=Configuration,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 15:45:34 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 15:45:34 2013 MDT

CN=Configuration,DC=mydomain,DC=local
        Default-First-Site-Name\DC0 via RPC
                DSA object GUID: 2f9a5ed0-165e-4e2f-a1e4-9814baaea7cb
                Last attempt @ Mon Apr 29 15:45:34 2013 MDT was successful
                0 consecutive failure(s).
                Last success @ Mon Apr 29 15:45:34 2013 MDT

==== KCC CONNECTION OBJECTS ====

Connection --
        Connection name: adcd1e5f-3336-42b5-acfb-2b308c9a83bc
        Enabled        : TRUE
        Server DNS name : DC1.mydomain.local
        Server DN name  : CN=NTDS Settings,CN=DC0,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydomain,DC=local
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!


samba-tool drs replicate DC0 DC1 returns:

Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -  <00002028: LdapErr: DSID-0C0901FC, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v1772> <>
Failed to connect to 'ldap://DC0' with backend 'ldap': (null)
ERROR(ldb): LDAP connection to DC0 failed - None

Very much a newbie,  and I jumped in with both feet any help you could provide is very much appreciated!!

Thanks!
- Fred