[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck

[Rowland Penny]

On 16/10/14 15:00, Rowland Penny wrote:
> On 16/10/14 12:21, L.P.H. van Belle wrote:
>> yes..
>>
>> the attibute "whenCreated" is not synced ( correctly)
>> there is a bug report of this.
>>
>> you can use this script: ( original created by Mourit Jan of the 
>> samba list )
>>
>> used on debian/ubuntu
>>
>>
>> #!/bin/sh
>>
>> ## the email adress to report to.
>> SETMAILREPORT=your at emaildomain.tld
>>
>> ## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles )
>> SETDCFSMO="dc1"
>> ## Second DC ( hostname or ipadres more then 2 DC's, separated by 
>> space )
>> SETOTHERDCS="dc2"
>>
>> SETSAMBATOOLS=`which samba-tool`
>> SETREMOVELOG=yes
>>
>> for x in $SETOTHERDCS ; do
>>      $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO 
>> ldap://$SETO THERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_checkdb
>> done
>>
>> if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
>>     cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE ldapcmp between 
>> $SETDCFSMO and $SETOTHERDCS" $SETMAILREPORT
>> fi
>>
>> if [ $SETREMOVELOG = yes ]; then
>>      rm /tmp/samba_ldapcmp_checkdb
>> fi
>>
>>> -----Oorspronkelijk bericht-----
>>> Van: aoster at novanetwork.de
>>> [mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>>> Verzonden: donderdag 16 oktober 2014 11:08
>>> Aan: samba at lists.samba.org
>>> Onderwerp: [Samba] Continuous Normalisation error for
>>> attribute whenCreated when performing dbcheck
>>>
>>> Hi all,
>>>
>>> since the migration of our old Win2k domain to Samba4 some years ago
>>> I get a lot of errors like the following when doing a
>>> "samba-tool dbcheck --cross-ncs --fix" :
>>>
>>>
>>> ERROR: Normalisation error for attribute whenCreated in
>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com
>>> value '19700101000000.0Z' should be '16010101000000.0Z'
>>> Fix normalisation for whenCreated from
>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>>> Normalised attribute whenCreated
>>>
>>>
>>> This repeats 1000+ times for many different entries.
>>>
>>> The samba-tool unfortunately does not fix the issue because
>>> when I start
>>> it a second time it will complain again, this time with values switched
>>> around:
>>>
>>> value '16010101000000.0Z' should be '19700101000000.0Z'
>>>
>>>
>>> Does anyone have an idea how to fix this ?
>>>
>>> Thank you very much for your kind help.
>>>
>>> best regards
>>>
>>> Andreas
>>>
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>>
> Hi Louis, I have had a look at the script you posted (after I put it 
> back together, it arrived here a bit disjointed ;-) )
>
> Just a few comments:
>
> This line:
>
> $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO 
> ldap://$SETOTHERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_check
>
> Shouldn't '$SETOTHERDCS'  be '$x' ?
>
> If you have more than two DC's, shouldn't the redirection sign '>' 
> before '$SETOTHERDCS ' actually be two i.e. '>>' ?
>
> I take it that the idea is to get cron to run it, as & when.
>
> finally, I had to rewrite the script slightly, sending the result by 
> the 'mail' program wouldn't work for me, so I ended up using 'ssmtp'
>
> Rowland
>
OH DEAR, I did it again, must remember to engage brain whilst typing, 
When I typed 'If you have more than two DC's, shouldn't the redirection 
sign '>' before '$SETOTHERDCS ' actually be two i.e. '>>' ?'
I really meant 'If you have more than two DC's, shouldn't the 
redirection sign '>' before '/tmp/samba_ldapcmp_check ' actually be two 
i.e. '>>' ?

Rowland