[Samba] Samba 4.1.13 join as DC failed - duplicate objectSid in Deleted Objects

Andrew W Elble aweits at rit.edu
Mon Nov 24 12:29:44 MST 2014 

Fails to join a test domain here. Duplicate objectSid in Deleted Objects. This triggers the conflict callback,
which then complains about the duplicate objectGUID it's about to create locally.

Running 4.1.13 slightly patched to print some extra debug info:

../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3977: Removing attribute showInAdvancedViewOnly with num_values==0
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3977: Removing attribute objectCategory with num_values==0
DRS replication add message:
dn: CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:b736fd49-d806-4325-a5cf-8f1dc1900d23,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu
changetype: add
objectClass: top
objectClass: foreignSecurityPrincipal
instanceType: 4
whenCreated: 20140529185605.0Z
isDeleted: TRUE
nTSecurityDescriptor: O:S-1-5-21-2675082056-1461024217-3286621127-512G:S-1-5-2
 1-2675082056-1461024217-3286621127-512D:AI(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;S-
 1-5-21-2675082056-1461024217-3286621127-512)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;
 SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2
 f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS
 )(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77b5b886-944a-11d
 1-aebd-0000f80367c1;;PS)(OA;;RPWP;e45795b2-9455-11d1-aebd-0000f80367c1;;PS)(O
 A;;RPWP;e45795b3-9455-11d1-aebd-0000f80367c1;;PS)(A;;RC;;;AU)(OA;;RP;59ba2f42
 -79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77b5b886-944a-11d1-aebd-0000f80367c1
 ;;AU)(OA;;RP;e45795b3-9455-11d1-aebd-0000f80367c1;;AU)(OA;;RP;e48d0154-bcf8-1
 1d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)S:
 AI(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a28
 5-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967a
 a5-0de6-11d0-a285-00aa003049e2;WD)
name:: Uy0xLTUtMjEtNDM2MTM2NTYzLTIzMDE2MTM2MjEtMTE2MDc0NDA3Ny01MTkKREVMOmI3MzZ
 mZDQ5LWQ4MDYtNDMyNS1hNWNmLThmMWRjMTkwMGQyMw==
objectSid: S-1-5-21-436136563-2301613621-1160744077-519
lastKnownParent: <GUID=c6f09a4f-73b2-4906-b7d9-2198704c9142>;CN=ForeignSecurit
 yPrincipals,DC=maintest,DC=adtest,DC=rit,DC=edu
isRecycled: TRUE
cn:: Uy0xLTUtMjEtNDM2MTM2NTYzLTIzMDE2MTM2MjEtMTE2MDc0NDA3Ny01MTkKREVMOmI3MzZmZ
 DQ5LWQ4MDYtNDMyNS1hNWNmLThmMWRjMTkwMGQyMw==
objectGUID: b736fd49-d806-4325-a5cf-8f1dc1900d23
whenChanged: 20140529192616.0Z
uSNCreated: 7549
uSNChanged: 7549

<snip>

../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3977: Removing attribute showInAdvancedViewOnly with num_values==0
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3977: Removing attribute objectCategory with num_values==0
DRS replication add message:
dn: CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu
changetype: add
objectClass: top
objectClass: foreignSecurityPrincipal
instanceType: 4
whenCreated: 20140530192323.0Z
isDeleted: TRUE
nTSecurityDescriptor: O:S-1-5-21-2675082056-1461024217-3286621127-512G:S-1-5-2
 1-2675082056-1461024217-3286621127-512D:AI(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;S-
 1-5-21-2675082056-1461024217-3286621127-512)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;
 SY)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;AO)(A;;RPLCLORC;;;PS)(OA;;CR;ab721a53-1e2
 f-11d0-9819-00aa0040529b;;PS)(OA;;CR;ab721a54-1e2f-11d0-9819-00aa0040529b;;PS
 )(OA;;CR;ab721a56-1e2f-11d0-9819-00aa0040529b;;PS)(OA;;RPWP;77b5b886-944a-11d
 1-aebd-0000f80367c1;;PS)(OA;;RPWP;e45795b2-9455-11d1-aebd-0000f80367c1;;PS)(O
 A;;RPWP;e45795b3-9455-11d1-aebd-0000f80367c1;;PS)(A;;RC;;;AU)(OA;;RP;59ba2f42
 -79a2-11d0-9020-00c04fc2d3cf;;AU)(OA;;RP;77b5b886-944a-11d1-aebd-0000f80367c1
 ;;AU)(OA;;RP;e45795b3-9455-11d1-aebd-0000f80367c1;;AU)(OA;;RP;e48d0154-bcf8-1
 1d1-8702-00c04fb96050;;AU)(OA;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD)(A
 ;CIID;RPWPCRCCLCLORCWOWDSDSW;;;BA)(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;S-1-5-
 21-436136563-2301613621-1160744077-519)(A;CIID;LC;;;RU)(OA;CIIOID;RP;037088f8
 -0ae1-11d2-b422-00a0c968f939;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIO
 ID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d3cf;bf967aba-0de6-11d0-a285-00aa003049
 e2;RU)(OA;CIIOID;RP;bc0ac240-79a9-11d0-9020-00c04fc2d4cf;bf967aba-0de6-11d0-a
 285-00aa003049e2;RU)(OA;CIIOID;RP;4c164200-20c0-11d0-a768-00aa006e0529;bf967a
 ba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIOID;RP;5f202010-79a5-11d0-9020-00c04
 fc2d4cf;bf967aba-0de6-11d0-a285-00aa003049e2;RU)(OA;CIIOID;RPLCLORC;;bf967a9c
 -0de6-11d0-a285-00aa003049e2;RU)(OA;CIIOID;RPLCLORC;;bf967aba-0de6-11d0-a285-
 00aa003049e2;RU)(OA;CIIOID;RP;037088f8-0ae1-11d2-b422-00a0c968f939;4828cc14-1
 437-45bc-9b07-ad6f015e5f28;RU)(OA;CIIOID;RP;59ba2f42-79a2-11d0-9020-00c04fc2d
 3cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)(OA;CIIOID;RP;bc0ac240-79a9-11d0-
 9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)(OA;CIIOID;RP;4c164
 200-20c0-11d0-a768-00aa006e0529;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)(OA;C
 IIOID;RP;5f202010-79a5-11d0-9020-00c04fc2d4cf;4828cc14-1437-45bc-9b07-ad6f015
 e5f28;RU)(OA;CIIOID;RPLCLORC;;4828cc14-1437-45bc-9b07-ad6f015e5f28;RU)(OA;CII
 OID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967aba-0de6-11d0-a285-00aa00304
 9e2;ED)(OA;CIIOID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967a9c-0de6-11d0-
 a285-00aa003049e2;ED)(OA;CIIOID;RP;b7c69e6d-2cc7-11d2-854e-00a0c983f608;bf967
 a86-0de6-11d0-a285-00aa003049e2;ED)(OA;CIID;RPWPCR;91e647de-d96f-4b70-9557-d6
 3ff4f3ccd8;;PS)S:AI(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967
 aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-00
 00f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
name:: Uy0xLTUtMjEtNDM2MTM2NTYzLTIzMDE2MTM2MjEtMTE2MDc0NDA3Ny01MTkKREVMOjZlMzd
 hYWE2LWYzOGItNDQ0Yy04NTE5LWEyNjZiZWIzMTY3Mw==
objectSid: S-1-5-21-436136563-2301613621-1160744077-519
lastKnownParent: <GUID=c6f09a4f-73b2-4906-b7d9-2198704c9142>;CN=ForeignSecurit
 yPrincipals,DC=maintest,DC=adtest,DC=rit,DC=edu
isRecycled: TRUE
cn:: Uy0xLTUtMjEtNDM2MTM2NTYzLTIzMDE2MTM2MjEtMTE2MDc0NDA3Ny01MTkKREVMOjZlMzdhY
 WE2LWYzOGItNDQ0Yy04NTE5LWEyNjZiZWIzMTY3Mw==
objectGUID: 6e37aaa6-f38b-444c-8519-a266beb31673
whenChanged: 20140530210625.0Z
uSNCreated: 7587
uSNChanged: 7587


Adding CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu
Error Index Adding CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu (../lib/ldb/ldb_tdb/ldb_index.c:12
16: Failed to re-index objectSid in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu - ../lib/ldb/ldb_
tdb/ldb_index.c:1148: unique index violation on objectSid in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit
,DC=edu)

../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3829: Resolving conflict record via incoming rename 'CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu' -> 'CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu'

Adding CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu
Error Index Adding CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu (../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu)

replmd_op_callback failure. Error is: Entry already exists (../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu)

Failed to apply records: ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectGUID in CN=S-1-5-21-436136563-2301613621-1160744077-519\0ADEL:6e37aaa6-f38b-444c-8519-a266beb31673\0ACNF:6e37aaa6-f38b-444c-8519-a266beb31673,CN=Deleted Objects,DC=maintest,DC=adtest,DC=rit,DC=edu: Entry already exists
Failed to commit objects: WERR_GENERAL_FAILURE
Join failed - cleaning up



-- 
Andrew W. Elble
aweits at discipline.rit.edu
Infrastructure Engineer, Communications Technical Lead
Rochester Institute of Technology
PGP: BFAD 8461 4CCF DC95 DA2C B0EB 965B 082E 863E C912

More information about the samba mailing list