[Samba] Problem creating new DC's

[Chris Alavoine]

Hi James,

I have upped the RAM to 20GB and given it 8 cores, but unfortunately am
getting the same result. The time taken to process all the objects is well
over an hour which I'm guessing is where my problem lies.

Not sure what else to try expect maybe attempting to reduce the number of
DC's (over a weekend) and try again.

Thanks,
Chris.


On 3 June 2014 13:56, lp101 <lingpanda101 at gmail.com> wrote:

>      I believe I needed at least 8GB to complete the join process. I know
> it was more then 4GB. Here is a link to my discussion I had on this list in
> Jan.
>
>
> http://samba.2283325.n4.nabble.com/DomainDnsZone-Replication-Shows-200-000-Objects-td4658437i20.html
>
>     I strongly discourage using the tombstone attribute to fix this issue
> within this discussion. It created more issues then it was worth. I'm not
> sure if this bug was fixed or not. Increase the memory and attempt to join
> the new DC to the existing DC at that site. It should help with the timeout
> error. Good luck!
>
>
>
> On 6/3/2014 8:44 AM, Chris Alavoine wrote:
>
> Hi James,
>
>  Thanks for the reply.
>
>  My last attempt had 4GB RAM and 4 cores (VM). Do you think I should give
> it some more?
>
>  Thanks,
> Chris.
>
>
> On 3 June 2014 13:42, lp101 <lingpanda101 at gmail.com> wrote:
>
>>     Hi Chris,
>>
>>     How much memory does your server have and are you attempting to join
>> it to the local DC at the site? I've had an issue similar to this and
>> increasing the server memory and attempting to join to a local DC helped.
>>
>>
>> On 6/3/2014 8:04 AM, Chris Alavoine wrote:
>>
>>> Hi there,
>>>
>>> I currently have 6 Samba4 (4.1.5) DC's spread over a global network. This
>>> is working ok but they were created before any Sites were made and as the
>>> ability to move DC's to new Sites is not working, I am attempting to
>>> create
>>> new DC's in each location and then demote the old ones.
>>>
>>> The problem I am facing is the domain join process keeps timing out for
>>> any
>>> new DC. I think this is due the amount of objects that now need to be
>>> synced:
>>>
>>> Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
>>> objects[142711/162691] linked_values[0/0]
>>> Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
>>> objects[143113/162691] linked_values[0/0]
>>> Partition[DC=DomainDnsZones,DC=essence,DC=internal,DC=com]
>>> objects[143515/162691] linked_values[0/0]
>>>
>>> (this is a snippet from attempting to join, as you can see there are
>>> 162691
>>> objects which takes a fair amount of time to get through - I have tried
>>> this from various different locations).
>>>
>>> This is the final error I get:
>>>
>>> Replicating DC=ForestDnsZones,DC=essence,DC=internal,DC=com
>>> Partition[DC=ForestDnsZones,DC=essence,DC=internal,DC=com] objects[24/24]
>>> linked_values[0/0]
>>> Partition[DC=ForestDnsZones,DC=essence,DC=internal,DC=com] objects[48/24]
>>> linked_values[0/0]
>>> Committing SAM database
>>> Sending DsReplicateUpdateRefs for all the replicated partitions
>>> Join failed - cleaning up
>>> checking sAMAccountName
>>> ERROR(runtime): uncaught exception - (-1073741643,
>>> 'NT_STATUS_IO_TIMEOUT')
>>>    File
>>> "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
>>> line 175, in _run
>>>      return self.run(*args, **kwargs)
>>>    File
>>> "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
>>> line
>>> 552, in run
>>>      machinepass=machinepass, use_ntvfs=use_ntvfs,
>>> dns_backend=dns_backend)
>>>    File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py",
>>> line
>>> 1172, in join_DC
>>>      ctx.do_join()
>>>    File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py",
>>> line
>>> 1082, in do_join
>>>      ctx.join_finalise()
>>>    File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py",
>>> line
>>> 881, in join_finalise
>>>      ctx.send_DsReplicaUpdateRefs(nc)
>>>    File "/usr/local/samba/lib/python2.7/site-packages/samba/join.py",
>>> line
>>> 866, in send_DsReplicaUpdateRefs
>>>      ctx.drsuapi.DsReplicaUpdateRefs(ctx.drsuapi_handle, 1, r)
>>>
>>>
>>> Which seem to suggest that the join fails, it tries to clean up and gets
>>> a
>>> NT_STATUS_IO_TIMEOUT error.
>>>
>>> This leaves me with a non-functioning DC appearing in the Domain
>>> Controller
>>> list on ADUC and ADSS which need to be cleaned out.
>>>
>>> Any advice on how I can get around this problem?
>>>
>>> Thanks
>>> Chris.
>>>
>>>
>> --
>>  -James
>>
>>
>
>
>  --
> ACS (Alavoine Computer Services Ltd)
> Chris Alavoine
> mob +44 (0)7724 710 730
> www.alavoinecs.co.uk
> http://twitter.com/#!/alavoinecs
> http://www.linkedin.com/pub/chris-alavoine/39/606/192
>
>
> --
> -James
>
>


-- 
ACS (Alavoine Computer Services Ltd)
Chris Alavoine
mob +44 (0)7724 710 730
www.alavoinecs.co.uk
http://twitter.com/#!/alavoinecs
http://www.linkedin.com/pub/chris-alavoine/39/606/192