[Samba] samba4 replication issues | sam.ldb inconsistency

L.P.H. van Belle belle at bazuin.nl
Wed Jul 9 08:35:06 MDT 2014

Ok before you reboot.. . 

what is the output off.. 

ls -lai .../samba/private/sam.ldb.d/

ls -lai .../samba/private/dns/sam.ldb.d/

and how much ram does you server have.
and only samba or running more, of lots more. 



>-----Oorspronkelijk bericht-----
>Van: heupink at merit.unu.edu 
>[mailto:samba-bounces at lists.samba.org] Namens mourik jan 
>heupink - merit
>Verzonden: woensdag 9 juli 2014 15:57
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba4 replication issues | sam.ldb 
>Hi Louis,
>Thanks for your reply.
>I just installed a new dc3, and tried to join it to the AD:
>- it finds my writeble DC1
>- the join succeeds
>- replication starts, but then it bails out on:
>Replicating DC=DomainDnsZones,DC=samba,DC=company,DC=com
>Join failed - cleaning up
>And for the record: DC=DomainDnsZones is the corrupted ldb file on my 
>dc1. So this sounds logical to me.
>How dangerous is it, at this point, to transfer all (or perhaps some?) 
>fsmo roles to dc2, which seems to be in slightly better shape 
>than dc1...?
>(however: on dc2 "samba-tool dbcheck cross-ncs" is STILL 
>checking 187479 
>objects, and, as indicated by Daniel, it will probably never 
>finish that)
>What a mess...
>On 7/9/2014 15:00, L.P.H. van Belle wrote:
>> In you case, i would go for a new install.
>> Add DC3 to the domain, check the database.
>> move the FSMO Roles to this server.
>> Why a new install, easier to check for errors.
>> and ... Dont hurry to much, give the system time to set things.
>> sychronizing takes time.. so be patient.
>> and ( in my case ) takes much less time to fix than solving 
>the problem.
>> and 1 importent thing, if you do this on a VM, set DC3 to 
>atleast 8GB Ram.
>> with virtual DC's you set setup within 15 min. ( 5 min for 
>an extra dc for me with my scripts ;-) )
>> This is also why i dont use a DC for other things the being a DC.
>> Very fast recovering and new installs.
>> Louis
>>> -----Oorspronkelijk bericht-----
>>> Van: heupink at merit.unu.edu
>>> [mailto:samba-bounces at lists.samba.org] Namens mourik jan
>>> heupink - merit
>>> Verzonden: woensdag 9 juli 2014 14:31
>>> Aan: samba at lists.samba.org
>>> Onderwerp: Re: [Samba] samba4 replication issues | sam.ldb
>>> inconsistency
>>> Hi achim, list
>>>> If one of your two DC's is still working flawless you can 
>try to move
>>>> all fsmo roles to that server and rejoin the other one.
>>> But I'm not *sure* that one of my dc's is in perfect shape. I *know*
>>> that the DC=DOMAINDNSZONES on dc1 is corrupt.
>>> DC2 seems to be fine, however, samba-tool dbcheck cross-ncs
>>> never stops
>>> checking, and has been running for 18 hours now. So perhaps 
>dc2 is not
>>> healthy too?
>>> samba-tool fsmo show tells me that all roles are currently 
>on the DC1.
>>> I'm a bit hesitant to start messing with my AD (transferring roles,
>>> etc), because of the uncertain state it seems to be in. I'm
>>> not sure if
>>> I'll be able to reverse it, if this goes terribly wrong.
>>> If I *knew* that DC2 is healthy, I could transfer all roles
>>> there, etc.
>>> But as Daniel said: he had to reinstall a DC because of "samba-tool
>>> dbcheck cross-ncs" that never ended. (like the situation on my DC2)
>>>> Seems tdbbackup works on dc1 for
>>> the backup
>>>> fixes your issues.
>>> So, is it possible to use take the
>working dc,
>>> and copy it to the problem dc? Can I overwrite the corrupt file with
>>> another dc's file?
>>> Or is my best bet now to install a DC3, and see what gets
>>> replicated to
>>> that new dc?
>>> MJ
>>>> achim~
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list