[Samba] Samba4 - Corrupted group caused stop of replication - "Object class violation"

[Andrew Bartlett]

On Wed, 2015-02-04 at 11:46 +0100, Olivier BILHAUT wrote:
>  
> Hi Samba List! 
> 
> We are using Samba Version 4.1.12 on two master DC.
> 
> 
> We've noticed that a corrupted group has been created, we tried to
> delete it, and since then, the replication fail between the two DC.
> 
> 
> The result of the command : "samba-tool drs showrepl" is the following
> : 
> 
> On the first DC, INBOUND NEIGHBORS : 
> 
> Last attempt @ Wed Feb 4
> 11:26:41 2015 CET failed, result 58 (WERR_BAD_NET_RESP)
> 235 consecutive
> failure(s). 
> 
> On the same DC, log level at 5, we've got the following
> errors trying to force replication : 
> 
> The command : 
> 
> ./samba-tool drs
> replicate FirstDC SecondDC dc=fhm,dc=local 
> 
> The result in the samba log
> : 
> 
>  ldb: No objectClass found in replPropertyMetaData for
> CN=gastroenterologie_sADEL:dd657361-ee30-409c-a8fe-388884a55e6a,CN=Deleted
> Objects,DC=fhm,DC=local!
> 
> [2015/02/04 11:36:37.309435, 0]
> ../source4/dsdb/repl/replicated_objects.c:783(dsdb_replicated_objects_commit)
> 
> Failed to apply records: replmd_replicated_apply_add: error during DRS
> repl ADD: replmd_replicated_apply_add: error during DRS repl ADD:
> replmd_replicated_apply_add: error during DRS repl ADD:
> replmd_replicated_apply_add: error duri: Object class
> violation
> [2015/02/04 11:36:37.310110, 0]
> ../source4/dsdb/repl/drepl_out_helpers.c:733(dreplsrv_op_pull_source_apply_changes_trigger)
> 
> Failed to commit objects:
> WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
> [2015/02/04
> 11:36:37.310755, 4]
> ../source4/dsdb/repl/drepl_out_pull.c:178(dreplsrv_pending_op_callback)
> 
> dreplsrv_op_pull_source(WERR_BAD_NET_RESP) for DC=fhm,DC=local 
> 
> The
> replication works one-way, from FirstDC to SecondDC 

You need to force a replication of all objects from FirstDC to SecondDC.
'samba-tool drs replicate --full-sync' should do it. 

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba