[Samba] kcc_deleted

[Rob Janssen]

During my actions to transfer a domain controller role from a Windows 2003 server to Samba
(now version 4.0.12) and generally cleaning up the domain I made the mistake to manually delete a
record from a "deleted objects" zone.    I now understand that I should have waited until it would
have gone away by itself.
Ever since, the following message is regularly logged:

   ../source4/dsdb/kcc/kcc_deleted.c:134: Failed to remove deleted object DC=example-ws13\0ADEL:cc0f8973-0d47-4c54-b2d9-db40346f4384,CN=Deleted Objects,DC=DomainDnsZones,DC=example,DC=com

I have examined the source code but I don't quite understand what is happening.  It appears
that the code is listing everything present in that zone, finds the record that I once deleted,
tries to delete it and gets a failure message (because it is already deleted?)
As far as I understand it gets the list of records to delete from the same place where it also
does the deletions.   But if that were true, why does it still find it?  Is there a separate list of
records to be deleted somewhere else?  How can I clean that?

Furthermore, after I demoted the Windows DC I no longer can find that whole DC=DomainDnsZones
zone in the AD using the different tools available on Windows to browse AD, LDAP etc.
I have since moved DNS from bind to internal DNS, the DNS works fine, but it does not appear
to use that zone in AD anymore.   How come the kcc still knows about it?

Rob