[Samba] Replication Problem with Deleted Object on Samba 4.1.17
achim at ag-web.biz
Wed Jul 22 00:04:20 UTC 2015
Am 21.07.2015 um 20:26 schrieb Achim Gottinger:
> Hello List,
> Im running an network with five samba 4 addc, all on debian wheezy
> with the sernet packages. Recently an replication error showed up for
> an single Computer (WIN7-M-ADMIN) record. So I unjoined the pc from
> the domain deleted it's record from dc1 manually on the other dc's it
> had been removed automaticaly during unjoin.
> Now I get the following error
> [2015/07/21 20:15:40.113205, 0]
> ldb: No objectClass found in replPropertyMetaData for
> [2015/07/21 20:15:40.113772, 0]
> Failed to apply records: replmd_replicated_apply_add: error during
> DRS repl ADD: No objectClass found in replPropertyMetaData for
> : Object class violation
> [2015/07/21 20:15:40.114277, 0]
> Failed to commit objects:
> Joing does not help the Computer shows up on dc's 2-4 but not on dc1.
> On dc1 there is no record for win7-m-admin neighter an deleted one.
> samba-tool dbcheck -cross-ncs show's no errors on all dc's.
> samba-tool ldbcmp detects an missing win7-m-admin record on dc1.
> An year back it was possible to remove Deleted Object with ldbdel
> ldbdel --show-deleted --extended-dn -H /var/lib/samba/private/sam.ldb
> -b "CN=Deleted Objects,DC=domain,DC=local"
> Results in:
> delete of '' failed - (Unwilling to perform) Refusing to delete
> tombstone object
> Objects,DC=fot,DC=local. This check is to prevent corruption of the
> replicated state.
> I'd just purge this record from dc's 2-4 and rejoin the computer once
> again but unfortunately this is no longer possible because of this new
> check. Is there an way to force the deletion, because the replicated
> state is already corrupted?
> Thanks in advance
Fixed it with
samba-tool drs replicate dc2 dc1 DC=fot,DC=local --full-sync
and so on till samba-tool drs showrepl showed no more errors on all dc's.
More information about the samba