[Samba] Dead Domain Controller server

[Andrew Bartlett]

On Tue, 2015-12-22 at 15:30 -0200, Lucas Peruchi wrote:
> Good afternoon, 
> 
> I have an environment with 4 servers samba 4 and yesterday one of
> them died, I tried removing it and not found, then recreated the
> server with the same name and joined him as a DC, however, he created
> a new uuid and sync entres servers I stopped, I had to force a forced
> sync: 
> 
> # samba-tool drs replicate samba02 samba01 DC=example,DC=com,DC=br 
> # samba-tool drs replicate samba03 samba01 DC=example,DC=com,DC=br 
> # samba-tool drs replicate samba04 samba01 DC=example,DC=com,DC=br 
> 
> And also performed in the 4 servers: 
> 
> # samba_dnsupdate --verbose --all-names 
> # samba-tool dbcheck 
> Checking 4376 objects 
> Checked 4376 objects (0 errors) 
> 
> But still an error occurs: 
> 
> Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for
> ncacn_ip_tcp:192.168.0.195[1024,seal,krb5,target_hostname=092bc931
> -4e23-416d-bc04-218e3fc8ef62._msdcs.example.com.br,target_principal=E
> 3514235-4B06-11D1-AB04-00C04FC2DCD2/092bc931-4e23-416d-bc04
> -218e3fc8ef62/example.com.br at example.com.br,abstract_syntax=e3514235
> -4b06-11d1-ab04-00c04fc2dcd2/0x00000004,localaddress=192.168.0.5]
> NT_STATUS_INVALID_PARAMETER 
> 
> This error is showing every second in the log, have a safe way to
> remove the old domain server? As I should have proceeded to remove a
> dead DC Samba4 server domain? 
> 
> Samba: 4.3.3 
> S.O: Centos 7 
> Bind: 9.9.4-29 

Samba git master (and so 4.4 when we release it) has a new 'samba-tool
domain demote --remove-other-dead-server' option designed to clean up
exactly this.  

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba