[Samba] Problem creating new DC's

Chris Alavoine chrisa at acs-info.co.uk
Tue Jun 3 06:04:45 MDT 2014


Hi there,

I currently have 6 Samba4 (4.1.5) DC's spread over a global network. This
is working ok but they were created before any Sites were made and as the
ability to move DC's to new Sites is not working, I am attempting to create
new DC's in each location and then demote the old ones.

The problem I am facing is the domain join process keeps timing out for any
new DC. I think this is due the amount of objects that now need to be
synced:

Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
objects[142711/162691] linked_values[0/0]
Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
objects[143113/162691] linked_values[0/0]
Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
objects[143515/162691] linked_values[0/0]

(this is a snippet from attempting to join, as you can see there are 162691
objects which takes a fair amount of time to get through - I have tried
this from various different locations).

This is the final error I get:

Replicating DC=ForestDnsZones,DC=essence,DC=internal,DC=com
Partition[DC=ForestDnsZones,DC=essence,DC=internal,DC=com] objects[24/24]
linked_values[0/0]
Partition[DC=ForestDnsZones,DC=essence,DC=internal,DC=com] objects[48/24]
linked_values[0/0]
Committing SAM database
Sending DsReplicateUpdateRefs for all the replicated partitions
Join failed - cleaning up
checking sAMAccountName
ERROR(runtime): uncaught exception - (-1073741643, 'NT_STATUS_IO_TIMEOUT')
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 175, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line
552, in run
    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", line
1172, in join_DC
    ctx.do_join()
  File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", line
1082, in do_join
    ctx.join_finalise()
  File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", line
881, in join_finalise
    ctx.send_DsReplicaUpdateRefs(nc)
  File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py", line
866, in send_DsReplicaUpdateRefs
    ctx.drsuapi.DsReplicaUpdateRefs(ctx.drsuapi_handle, 1, r)


Which seem to suggest that the join fails, it tries to clean up and gets a
NT_STATUS_IO_TIMEOUT error.

This leaves me with a non-functioning DC appearing in the Domain Controller
list on ADUC and ADSS which need to be cleaned out.

Any advice on how I can get around this problem?

Thanks
Chris.

-- 
ACS (Alavoine Computer Services Ltd)
Chris Alavoine
mob +44 (0)7724 710 730
www.alavoinecs.co.uk
http://twitter.com/#!/alavoinecs
http://www.linkedin.com/pub/chris-alavoine/39/606/192


More information about the samba mailing list