[Samba] bind fails to start w/missing records

[mourik jan heupink]

On 5/11/2015 13:38, Steve Thompson wrote:
> One can either kinit and use "-k 1" with ldapcmp, or use -Uadministrator
> instead. Without either, I get masses of differences (attributes that
> cannot be read). With either kinit or -U, I get exact equality for all
> three DC's.

Ok, I do neither: I simply logon as root, and type:

samba-tool ldapcmp ldap://dc3 ldap://dc2 --filter=whenChanged

(nothing else!) and this checks all attributes. (and again: I just tried 
with kinit, and it gives identical results)