[Samba] unique index violation on objectGUID, CN=Deleted Objects, DC=samdom, DC=domain

[Andrew Bartlett]

On Thu, 2013-01-31 at 10:20 +0800, Ong Yu-Phing wrote:
> Some (unsuccessful) updates, I've tried with both latest git pull () and 
> samba 4.0.2, both still encounter the same problem.
> 
> According to MS documentation, seems like I can't really delete objects 
> from the CN=Deleted Objects container, I have to wait for the tombstone 
> garbage collection to get to work, which means I have to wait ~180 days 
> from when the objects were actually deleted.  Does anybody have any idea 
> about how to delete these sooner (NB: the sysadmins thought we could 
> just change tombstone TTL to 1 day, but MS explicitly states this is a 
> bad idea... )

Samba treats having two objects with the same objectGUID as an
impossibility, and has been coded with that as a fundamental
assumption. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org