[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck
Andreas Oster
aoster at novanetwork.de
Fri Oct 17 05:01:22 MDT 2014
Am 17.10.2014 um 09:38 schrieb L.P.H. van Belle:
> GOOD MORNING ALL..
>
> Your totaly right Rowland..
> i have only 2 dc's so it worked ... ;-) i corrected it.
> thank you for reporting it.
>
> Greetz,
>
> Louis
>
>
>> -----Oorspronkelijk bericht-----
>> Van: rowlandpenny at googlemail.com
>> [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>> Verzonden: donderdag 16 oktober 2014 16:00
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Continuous Normalisation error for
>> attribute whenCreated when performing dbcheck
>>
>> On 16/10/14 12:21, L.P.H. van Belle wrote:
>>> yes..
>>>
>>> the attibute "whenCreated" is not synced ( correctly)
>>> there is a bug report of this.
>>>
>>> you can use this script: ( original created by Mourit Jan of
>> the samba list )
>>>
>>> used on debian/ubuntu
>>>
>>>
>>> #!/bin/sh
>>>
>>> ## the email adress to report to.
>>> SETMAILREPORT=your at emaildomain.tld
>>>
>>> ## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles )
>>> SETDCFSMO="dc1"
>>> ## Second DC ( hostname or ipadres more then 2 DC's,
>> separated by space )
>>> SETOTHERDCS="dc2"
>>>
>>> SETSAMBATOOLS=`which samba-tool`
>>> SETREMOVELOG=yes
>>>
>>> for x in $SETOTHERDCS ; do
>>> $SETSAMBATOOLS ldapcmp --filter="whenChanged"
>> ldap://$SETDCFSMO ldap://$x
>>
>> -d0 2>&1 >
>> /tmp/samba_ldapcmp_checkdb
>>> done
>>>
>>> if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
>>> cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE
>> ldapcmp between $SETDCFSMO
>>
>> and $SETOTHERDCS" $SETMAILREPORT
>>> fi
>>>
>>> if [ $SETREMOVELOG = yes ]; then
>>> rm /tmp/samba_ldapcmp_checkdb
>>> fi
>>>
>>>
>>>> -----Oorspronkelijk bericht-----
>>>> Van: aoster at novanetwork.de
>>>> [mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>>>> Verzonden: donderdag 16 oktober 2014 11:08
>>>> Aan: samba at lists.samba.org
>>>> Onderwerp: [Samba] Continuous Normalisation error for
>>>> attribute whenCreated when performing dbcheck
>>>>
>>>> Hi all,
>>>>
>>>> since the migration of our old Win2k domain to Samba4 some years ago
>>>> I get a lot of errors like the following when doing a
>>>> "samba-tool dbcheck --cross-ncs --fix" :
>>>>
>>>>
>>>> ERROR: Normalisation error for attribute whenCreated in
>>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com
>>>> value '19700101000000.0Z' should be '16010101000000.0Z'
>>>> Fix normalisation for whenCreated from
>>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>>>> Normalised attribute whenCreated
>>>>
>>>>
>>>> This repeats 1000+ times for many different entries.
>>>>
>>>> The samba-tool unfortunately does not fix the issue because
>>>> when I start
>>>> it a second time it will complain again, this time with
>> values switched
>>>> around:
>>>>
>>>> value '16010101000000.0Z' should be '19700101000000.0Z'
>>>>
>>>>
>>>> Does anyone have an idea how to fix this ?
>>>>
>>>> Thank you very much for your kind help.
>>>>
>>>> best regards
>>>>
>>>> Andreas
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions: https://lists.samba.org/mailman/options/samba
>>>>
>>>>
>> Hi Louis, I have had a look at the script you posted (after I put it
>> back together, it arrived here a bit disjointed ;-) )
>>
>> Just a few comments:
>>
>> This line:
>>
>> $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO
>> ldap://$SETOTHERDCS -d0 2>&1 > /tmp/samba_ldapcmp_check
>>
>> Shouldn't '$SETOTHERDCS' be '$x' ?
>>
>> If you have more than two DC's, shouldn't the redirection sign '>'
>> before '$SETOTHERDCS ' actually be two i.e. '>>' ?
>>
>> I take it that the idea is to get cron to run it, as & when.
>>
>> finally, I had to rewrite the script slightly, sending the
>> result by the
>> 'mail' program wouldn't work for me, so I ended up using 'ssmtp'
>>
>> Rowland
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba
>>
>>
>
Hello Louis,
if I understand it correct, your script is only reporting possible
discrepancies for the whenCreated value between DCs. But what is the use
of that ? Do you know a way how to fix it ?
Thank you very much for your kind help.
best regards
Andreas
More information about the samba
mailing list