[Samba] Continuous Normalisation error for attribute whenCreated when performing dbcheck

[L.P.H. van Belle]

Hai Andreas, 
It filters out the "whenCreated".
And this is as is supose to work. 
And this is because of samba not replicating the whenCreated. 


Louis


>-----Oorspronkelijk bericht-----
>Van: aoster at novanetwork.de 
>[mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>Verzonden: vrijdag 17 oktober 2014 13:01
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] Continuous Normalisation error for 
>attribute whenCreated when performing dbcheck
>
>Am 17.10.2014 um 09:38 schrieb L.P.H. van Belle:
>> GOOD MORNING ALL.. 
>> 
>> Your totaly right Rowland.. 
>>  i have only 2 dc's so it worked ... ;-) i corrected it. 
>> thank you for reporting it. 
>> 
>> Greetz, 
>> 
>> Louis
>> 
>> 
>>> -----Oorspronkelijk bericht-----
>>> Van: rowlandpenny at googlemail.com 
>>> [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>>> Verzonden: donderdag 16 oktober 2014 16:00
>>> Aan: samba at lists.samba.org
>>> Onderwerp: Re: [Samba] Continuous Normalisation error for 
>>> attribute whenCreated when performing dbcheck
>>>
>>> On 16/10/14 12:21, L.P.H. van Belle wrote:
>>>> yes..
>>>>
>>>> the attibute "whenCreated" is not synced ( correctly)
>>>> there is a bug report of this.
>>>>
>>>> you can use this script: ( original created by Mourit Jan of 
>>> the samba list )
>>>>
>>>> used on debian/ubuntu
>>>>
>>>>
>>>> #!/bin/sh
>>>>
>>>> ## the email adress to report to.
>>>> SETMAILREPORT=your at emaildomain.tld
>>>>
>>>> ## First DC ( hostname or ipadres ) ( The DC with the FSMO Roles )
>>>> SETDCFSMO="dc1"
>>>> ## Second DC ( hostname or ipadres more then 2 DC's, 
>>> separated by space )
>>>> SETOTHERDCS="dc2"
>>>>
>>>> SETSAMBATOOLS=`which samba-tool`
>>>> SETREMOVELOG=yes
>>>>
>>>> for x in $SETOTHERDCS ; do
>>>>      $SETSAMBATOOLS ldapcmp --filter="whenChanged" 
>>> ldap://$SETDCFSMO ldap://$x                                 
>>>                                                               
>>>                                 -d0 2>&1 > 
>>> /tmp/samba_ldapcmp_checkdb
>>>> done
>>>>
>>>> if grep -q FAILURE /tmp/samba_ldapcmp_checkdb; then
>>>>     cat /tmp/samba_ldapcmp_checkdb | mail -s "FAILURE 
>>> ldapcmp between $SETDCFSMO                                     
>>>                                                               
>>>                             and $SETOTHERDCS" $SETMAILREPORT
>>>> fi
>>>>
>>>> if [ $SETREMOVELOG = yes ]; then
>>>>      rm /tmp/samba_ldapcmp_checkdb
>>>> fi
>>>>   
>>>>
>>>>> -----Oorspronkelijk bericht-----
>>>>> Van: aoster at novanetwork.de
>>>>> [mailto:samba-bounces at lists.samba.org] Namens Andreas Oster
>>>>> Verzonden: donderdag 16 oktober 2014 11:08
>>>>> Aan: samba at lists.samba.org
>>>>> Onderwerp: [Samba] Continuous Normalisation error for
>>>>> attribute whenCreated when performing dbcheck
>>>>>
>>>>> Hi all,
>>>>>
>>>>> since the migration of our old Win2k domain to Samba4 
>some years ago
>>>>> I get a lot of errors like the following when doing a
>>>>> "samba-tool dbcheck --cross-ncs --fix" :
>>>>>
>>>>>
>>>>> ERROR: Normalisation error for attribute whenCreated in
>>>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com
>>>>> value '19700101000000.0Z' should be '16010101000000.0Z'
>>>>> Fix normalisation for whenCreated from
>>>>> CN=rpc-Ns-Group,CN=Schema,CN=Configuration,DC=samdom,DC=com? [YES]
>>>>> Normalised attribute whenCreated
>>>>>
>>>>>
>>>>> This repeats 1000+ times for many different entries.
>>>>>
>>>>> The samba-tool unfortunately does not fix the issue because
>>>>> when I start
>>>>> it a second time it will complain again, this time with 
>>> values switched
>>>>> around:
>>>>>
>>>>> value '16010101000000.0Z' should be '19700101000000.0Z'
>>>>>
>>>>>
>>>>> Does anyone have an idea how to fix this ?
>>>>>
>>>>> Thank you very much for your kind help.
>>>>>
>>>>> best regards
>>>>>
>>>>> Andreas
>>>>>
>>>>> -- 
>>>>> To unsubscribe from this list go to the following URL and read the
>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>>
>>>>>
>>> Hi Louis, I have had a look at the script you posted (after 
>I put it 
>>> back together, it arrived here a bit disjointed ;-) )
>>>
>>> Just a few comments:
>>>
>>> This line:
>>>
>>> $SETSAMBATOOLS ldapcmp --filter="whenChanged" ldap://$SETDCFSMO 
>>> ldap://$SETOTHERDCS  -d0 2>&1 > /tmp/samba_ldapcmp_check
>>>
>>> Shouldn't '$SETOTHERDCS'  be '$x' ?
>>>
>>> If you have more than two DC's, shouldn't the redirection sign '>' 
>>> before '$SETOTHERDCS ' actually be two i.e. '>>' ?
>>>
>>> I take it that the idea is to get cron to run it, as & when.
>>>
>>> finally, I had to rewrite the script slightly, sending the 
>>> result by the 
>>> 'mail' program wouldn't work for me, so I ended up using 'ssmtp'
>>>
>>> Rowland
>>>
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>>
>> 
>Hello Louis,
>
>if I understand it correct, your script is only reporting possible
>discrepancies for the whenCreated value between DCs. But what 
>is the use
>of that ? Do you know a way how to fix it ?
>
>Thank you very much for your kind help.
>
>best regards
>
>Andreas
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>