[Samba] samba4 replication issues | sam.ldb inconsistency
L.P.H. van Belle
belle at bazuin.nl
Wed Jul 9 08:35:06 MDT 2014
Ok before you reboot.. .
what is the output off..
ls -lai .../samba/private/sam.ldb.d/
ls -lai .../samba/private/dns/sam.ldb.d/
and how much ram does you server have.
and only samba or running more, of lots more.
>Van: heupink at merit.unu.edu
>[mailto:samba-bounces at lists.samba.org] Namens mourik jan
>heupink - merit
>Verzonden: woensdag 9 juli 2014 15:57
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] samba4 replication issues | sam.ldb
>Thanks for your reply.
>I just installed a new dc3, and tried to join it to the AD:
>- it finds my writeble DC1
>- the join succeeds
>- replication starts, but then it bails out on:
>Join failed - cleaning up
>And for the record: DC=DomainDnsZones is the corrupted ldb file on my
>dc1. So this sounds logical to me.
>How dangerous is it, at this point, to transfer all (or perhaps some?)
>fsmo roles to dc2, which seems to be in slightly better shape
>(however: on dc2 "samba-tool dbcheck cross-ncs" is STILL
>objects, and, as indicated by Daniel, it will probably never
>What a mess...
>On 7/9/2014 15:00, L.P.H. van Belle wrote:
>> In you case, i would go for a new install.
>> Add DC3 to the domain, check the database.
>> move the FSMO Roles to this server.
>> Why a new install, easier to check for errors.
>> and ... Dont hurry to much, give the system time to set things.
>> sychronizing takes time.. so be patient.
>> and ( in my case ) takes much less time to fix than solving
>> and 1 importent thing, if you do this on a VM, set DC3 to
>atleast 8GB Ram.
>> with virtual DC's you set setup within 15 min. ( 5 min for
>an extra dc for me with my scripts ;-) )
>> This is also why i dont use a DC for other things the being a DC.
>> Very fast recovering and new installs.
>>> -----Oorspronkelijk bericht-----
>>> Van: heupink at merit.unu.edu
>>> [mailto:samba-bounces at lists.samba.org] Namens mourik jan
>>> heupink - merit
>>> Verzonden: woensdag 9 juli 2014 14:31
>>> Aan: samba at lists.samba.org
>>> Onderwerp: Re: [Samba] samba4 replication issues | sam.ldb
>>> Hi achim, list
>>>> If one of your two DC's is still working flawless you can
>try to move
>>>> all fsmo roles to that server and rejoin the other one.
>>> But I'm not *sure* that one of my dc's is in perfect shape. I *know*
>>> that the DC=DOMAINDNSZONES on dc1 is corrupt.
>>> DC2 seems to be fine, however, samba-tool dbcheck cross-ncs
>>> never stops
>>> checking, and has been running for 18 hours now. So perhaps
>dc2 is not
>>> healthy too?
>>> samba-tool fsmo show tells me that all roles are currently
>on the DC1.
>>> I'm a bit hesitant to start messing with my AD (transferring roles,
>>> etc), because of the uncertain state it seems to be in. I'm
>>> not sure if
>>> I'll be able to reverse it, if this goes terribly wrong.
>>> If I *knew* that DC2 is healthy, I could transfer all roles
>>> there, etc.
>>> But as Daniel said: he had to reinstall a DC because of "samba-tool
>>> dbcheck cross-ncs" that never ended. (like the situation on my DC2)
>>>> Seems tdbbackup works on dc1 for
>>>> DC=DOMAINDNSZONES,DC=SAMBA,DC=COMPANY,DC=COM.ldb maybe using
>>> the backup
>>>> fixes your issues.
>>> So, is it possible to use take the
>>> DC=DOMAINDNSZONES,DC=SAMBA,DC=COMPANY,DC=COM.ldb from the
>>> and copy it to the problem dc? Can I overwrite the corrupt file with
>>> another dc's file?
>>> Or is my best bet now to install a DC3, and see what gets
>>> replicated to
>>> that new dc?
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions: https://lists.samba.org/mailman/options/samba
>To unsubscribe from this list go to the following URL and read the
More information about the samba