[Samba] How to fix --cross-ncs errors

Achim Gottinger achim at ag-web.biz
Fri Oct 31 07:00:36 MDT 2014

Am 31.10.2014 12:59, schrieb James:
> Andrew,
>     I chose not to delete the entries as they appeared harmless. These 
> also existed prior to the update. Everything appears to function as 
> intended.
> On 10/31/2014 6:28 AM, Andrew Bartlett wrote:
>> On Thu, 2014-10-23 at 08:17 -0400, James wrote:
>>> Hi Daniel,
>>>       Upgraded from 4.11. to 4.13 last night. After running the
>>> --cross-ncs --fix I receive several of the following errors.
>>> ERROR: wrong
>>> dn[DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
>>> name='HP57\nDEL:180d6b3b-55b5-46e1-9a91-94870a250438'
>>> new_dn[DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
>>> Rename DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local to
>>> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local? [y/N/all/none]
>>> Failed to rename object
>>> DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local into
>>> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local : (64, 'objectclass:
>>> structural objectClass dnsNode is not a valid child class for 
>>> CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local')
>> That is a very interesting bug.  I'm not sure it is actually wrong to
>> have a conflict record there, and deleting it would seem to just be
>> making things worse - it got there for some reason.
>> It is also harmless, so I wouldn't worry too much until we can fix up
>> dbcheck.  I may be back in contact for some details of the DB so I can
>> improve the test.
>> Andrew Bartlett
In my case the error looked like this

Checking 20970 objects
ERROR: wrong
Not renaming
Objects,DC=DomainDnsZones,DC=... to
Please use --fix to fix these errors
Checked 20970 objects (1 errors)

I suspect it caused samba daemons to stop on my four addc servers 
repeatedly after an service uptime of an few days. After i had removed 
the entry with ldbdel on all server they got back to run stable.


More information about the samba mailing list