[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck
rowlandpenny at googlemail.com
Thu Oct 16 08:00:24 MDT 2014
On 16/10/14 12:21, L.P.H. van Belle wrote:
> the attibute "whenCreated" is not synced ( correctly)
> there is a bug report of this.
> you can use this script: ( original created by Mourit Jan of the samba list )
> used on debian/ubuntu
> ## the email adress to report to.
> SETMAILREPORT=your at emaildomain.tld
> ## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles )
> ## Second DC ( hostname or ipadres more then 2 DC's, separated by space )
> SETSAMBATOOLS=`which samba-tool`
> for x in $SETOTHERDCS ; do
> $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO ldap://$SETO THERDCS -d0 2>&1 > /tmp/samba_ldapcmp_checkdb
> if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
> cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE ldapcmp between $SETDCFSMO and $SETOTHERDCS" $SETMAILREPORT
> if [ $SETREMOVELOG = yes ]; then
> rm /tmp/samba_ldapcmp_checkdb
>> -----Oorspronkelijk bericht-----
>> Van: aoster at novanetwork.de
>> [mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>> Verzonden: donderdag 16 oktober 2014 11:08
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] Continuous Normalisation error for
>> attribute whenCreated when performing dbcheck
>> Hi all,
>> since the migration of our old Win2k domain to Samba4 some years ago
>> I get a lot of errors like the following when doing a
>> "samba-tool dbcheck --cross-ncs --fix" :
>> ERROR: Normalisation error for attribute whenCreated in
>> value '19700101000000.0Z' should be '16010101000000.0Z'
>> Fix normalisation for whenCreated from
>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>> Normalised attribute whenCreated
>> This repeats 1000+ times for many different entries.
>> The samba-tool unfortunately does not fix the issue because
>> when I start
>> it a second time it will complain again, this time with values switched
>> value '16010101000000.0Z' should be '19700101000000.0Z'
>> Does anyone have an idea how to fix this ?
>> Thank you very much for your kind help.
>> best regards
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
Hi Louis, I have had a look at the script you posted (after I put it
back together, it arrived here a bit disjointed ;-) )
Just a few comments:
$SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO
ldap://$SETOTHERDCS -d0 2>&1 > /tmp/samba_ldapcmp_check
Shouldn't '$SETOTHERDCS' be '$x' ?
If you have more than two DC's, shouldn't the redirection sign '>'
before '$SETOTHERDCS ' actually be two i.e. '>>' ?
I take it that the idea is to get cron to run it, as & when.
finally, I had to rewrite the script slightly, sending the result by the
'mail' program wouldn't work for me, so I ended up using 'ssmtp'
More information about the samba