[Samba] Unable to remove orphan DC entries -UPDATED

[Andy Durant]

Still trying to resolve this issue:

Foudn that if i run:

ldbsearch --cross-ncs --show-deleted -H /usr/local/samba/private/sam.ldb 
| grep "\VDC02"

I get entries like the ones below. Runing ldbedit, I can not find those 
entries at all.  Is there somewhere specific I should be looking?


dn: 
CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
dNSHostName: VDC02.vestec.local
distinguishedName: 
CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Serv
dn: 
CN=VDC02\0ADEL:2a73b924-bf7a-469b-bdfb-927bce14e8c8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
dNSHostName: VDC02.vestec.local
distinguishedName: 
CN=VDC02\0ADEL:2a73b924-bf7a-469b-bdfb-927bce14e8c8,CN=Serv
dn: CN=NTDS 
Settings\0ADEL:f619f7d1-c32d-4a2e-ab8a-917ebbb3b780,CN=VDC02\0ADEL:ebf36fb6-ba12-4f88-ae92-77bb1f4e826d,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
  ,CN=VDC02\0ADEL:ebf36fb6-ba12-4f88-ae92-77bb1f4e826d,CN=Servers,CN=Default-Fi
dn: CN=NTDS 
Settings\0ADEL:9ea02b77-cd1c-46c5-a9ae-a1168e3d3f4c,CN=VDC02\0ADEL:2a73b924-bf7a-469b-bdfb-927bce14e8c8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
  ,CN=VDC02\0ADEL:2a73b924-bf7a-469b-bdfb-927bce14e8c8,CN=Servers,CN=Default-Fi
dn: CN=NTDS 
Settings\0ADEL:0b41b6fb-d606-47c1-a7bd-61b8c84d4300,CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
  ,CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Servers,CN=Default-Fi
dn: 
CN=VDC02\0ADEL:ebf36fb6-ba12-4f88-ae92-77bb1f4e826d,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=vestec,DC=local
dNSHostName: VDC02.vestec.local
distinguishedName: 
CN=VDC02\0ADEL:ebf36fb6-ba12-4f88-ae92-77bb1f4e826d,CN=Serv

Andy



On 4/8/2014 11:47 AM, Andy wrote:
> Hi
> I recently attempted to promote another dc into my domain and then 
> removed it which apparently didn't go well.
>
> The message said removal was successful however: I'm left with:
>
> DC=ForestDnsZones,DC=domain,DC=local
>         NTDS DN: CN=NTDS 
> Settings\0ADEL:0b41b6fb-d606-47c1-a7bd-61b8c84d4300,CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
>                 DSA object GUID: 0b41b6fb-d606-47c1-a7bd-61b8c84d4300
>                 Last attempt @ Tue Apr  8 11:41:07 2014 EDT failed, 
> result 2 (WERR_BADFILE)
>                 13798 consecutive failure(s).
>                 Last success @ NTTIME(0)
>
>
> I've cleared out any references to the now orphaned DC via adsiedit 
> and ensured there were no more DNS entries remaining and yet the error 
> persists.  I can not find any more references anywhere to remove. Is 
> there a hidden DB or something else I need to remove?
>
>
>  Andy