[Samba] bind fails to start w/missing records

[Steve Thompson]

On Sun, 10 May 2015, Steve Thompson wrote:

> On Sun, 10 May 2015, Rowland Penny wrote:
>>  Can you try running 'samba-tool ldapcmp ldap://<YOUR_FIRST_DC>
>>  ldap://<YOUR_SECOND_DC>
> Interesting. DC1 and DC2 have many differences; DC1 and DC3 are the same.

Turns out I made a dumb mistake. I did a kinit before ldapcmp, but omitted 
the "-k 1" on the latter. When I do it correctly, all three DC's are 
exactly the same. Phew.

Steve