[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck

L.P.H. van Belle belle at bazuin.nl
Thu Oct 16 05:21:48 MDT 2014


the attibute "whenCreated" is not synced ( correctly) 
there is a bug report of this. 

you can use this script: ( original created by Mourit Jan of the samba list ) 

used on debian/ubuntu


## the email adress to report to.
SETMAILREPORT=your at emaildomain.tld

## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles ) 
## Second DC ( hostname or ipadres more then 2 DC's, separated by space )

SETSAMBATOOLS=`which samba-tool`

for x in $SETOTHERDCS ; do
    $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO ldap://$SETO                                                                                                                                THERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_checkdb

if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
   cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE ldapcmp between $SETDCFSMO                                                                                                                                 and $SETOTHERDCS" $SETMAILREPORT

if [ $SETREMOVELOG = yes ]; then
    rm /tmp/samba_ldapcmp_checkdb

>-----Oorspronkelijk bericht-----
>Van: aoster at novanetwork.de 
>[mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>Verzonden: donderdag 16 oktober 2014 11:08
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Continuous Normalisation error for 
>attribute whenCreated when performing dbcheck
>Hi all,
>since the migration of our old Win2k domain to Samba4 some years ago
>I get a lot of errors like the following when doing a
>"samba-tool dbcheck --cross-ncs --fix" :
>ERROR: Normalisation error for attribute whenCreated in
>value '19700101000000.0Z' should be '16010101000000.0Z'
>Fix normalisation for whenCreated from
>CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>Normalised attribute whenCreated
>This repeats 1000+ times for many different entries.
>The samba-tool unfortunately does not fix the issue because 
>when I start
>it a second time it will complain again, this time with values switched
>value '16010101000000.0Z' should be '19700101000000.0Z'
>Does anyone have an idea how to fix this ?
>Thank you very much for your kind help.
>best regards
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list