[Samba] How to fix --cross-ncs errors

[Achim Gottinger]

Am 31.10.2014 12:59, schrieb James:
> Andrew,
>
>     I chose not to delete the entries as they appeared harmless. These 
> also existed prior to the update. Everything appears to function as 
> intended.
>
> On 10/31/2014 6:28 AM, Andrew Bartlett wrote:
>> On Thu, 2014-10-23 at 08:17 -0400, James wrote:
>>> Hi Daniel,
>>>
>>>       Upgraded from 4.11. to 4.13 last night. After running the
>>> --cross-ncs --fix I receive several of the following errors.
>>>
>>> ERROR: wrong
>>> dn[DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
>>> name='HP57\nDEL:180d6b3b-55b5-46e1-9a91-94870a250438'
>>> new_dn[DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
>>> Rename DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local to
>>> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local? [y/N/all/none]
>>>
>>> Failed to rename object
>>> DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local into
>>> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local : (64, 'objectclass:
>>> structural objectClass dnsNode is not a valid child class for 
>>> CN=Deleted
>>> Objects,DC=DomainDnsZones,DC=mydomain,DC=local')
>> That is a very interesting bug.  I'm not sure it is actually wrong to
>> have a conflict record there, and deleting it would seem to just be
>> making things worse - it got there for some reason.
>>
>> It is also harmless, so I wouldn't worry too much until we can fix up
>> dbcheck.  I may be back in contact for some details of the DB so I can
>> improve the test.
>>
>> Andrew Bartlett
>>
>
In my case the error looked like this

Checking 20970 objects
ERROR: wrong
dn[DC=client\0ACNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted 
Objects,DC=DomainDnsZones,DC=...]
dc='client\nCNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9'
name='client\nDEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9'
new_dn[DC=client\0ADEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted 
Objects,DC=DomainDnsZones,DC=...]
Not renaming
DC=client\0ACNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted 
Objects,DC=DomainDnsZones,DC=... to
DC=client\0ADEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted 
Objects,DC=DomainDnsZones,DC=...
Please use --fix to fix these errors
Checked 20970 objects (1 errors)

I suspect it caused samba daemons to stop on my four addc servers 
repeatedly after an service uptime of an few days. After i had removed 
the entry with ldbdel on all server they got back to run stable.

achim~