[Samba] one day AD use -> samba-tool dbcheck reports "Normalisation error for attribute 'objectClass'"

mourik jan heupink - merit heupink at merit.unu.edu
Sat Mar 29 10:09:38 MDT 2014


Hi all,

Our migration is coming along nicely, everything seems to work like it 
should... I thought...  Only samba-tool dbcheck reports five errors:

root at dc1:~# samba-tool dbcheck
Checking 1143 objects
ERROR: Normalisation error for attribute 'objectClass' in 
'CN=phdseminar,CN=Users,DC=my,DC=samba,DC=domain'
Values/Order of values do/does not match: ['top', 'securityPrincipal', 
'posixAccount', 'person', 'organizationalPerson', 'user']/['top', 
'posixAccount', 'securityPrincipal', 'person', 'organizationalPerson', 
'user']!
Not fixing attribute 'objectClass'
ERROR: Normalisation error for attribute 'objectClass' in 
'CN=postmaster,CN=Users,DC=my,DC=samba,DC=domain'
Values/Order of values do/does not match: ['top', 'securityPrincipal', 
'posixAccount', 'person', 'organizationalPerson', 'user']/['top', 
'posixAccount', 'securityPrincipal', 'person', 'organizationalPerson', 
'user']!
Not fixing attribute 'objectClass'
ERROR: Normalisation error for attribute 'objectClass' in 
'CN=opac,CN=Users,DC=my,DC=samba,DC=domain'
Values/Order of values do/does not match: ['top', 'securityPrincipal', 
'posixAccount', 'person', 'organizationalPerson', 'user']/['top', 
'posixAccount', 'securityPrincipal', 'person', 'organizationalPerson', 
'user']!
Not fixing attribute 'objectClass'
ERROR: Normalisation error for attribute 'objectClass' in 
'CN=seminar,CN=Users,DC=my,DC=samba,DC=domain'
Values/Order of values do/does not match: ['top', 'securityPrincipal', 
'posixAccount', 'person', 'organizationalPerson', 'user']/['top', 
'posixAccount', 'securityPrincipal', 'person', 'organizationalPerson', 
'user']!
Not fixing attribute 'objectClass'
ERROR: Normalisation error for attribute 'objectClass' in 
'CN=heupink,CN=Users,DC=my,DC=samba,DC=domain'
Values/Order of values do/does not match: ['top', 'securityPrincipal', 
'posixAccount', 'person', 'organizationalPerson', 'user']/['top', 
'posixAccount', 'securityPrincipal', 'person', 'organizationalPerson', 
'user']!
Not fixing attribute 'objectClass'
Please use --fix to fix these errors
Checked 1143 objects (5 errors)
root at dc1:~#

Are these errors something to worry about? This morning, right after the 
classicupgrade, I also ran the dbcheck, and it reported 1 error, and 
adding --fix did NOT cure anything.

So, is my AD database corrupt, after it's first day of being alive??

Errors are on both DC's, both are running btrfs, virtual machines, on 
hardware raid, no errors in syslog etc.

Ideas anyone?


More information about the samba mailing list