[Samba] 4th DC Unable to Replicate - WERR_DS_DRA_ACCESS_DENIED

David Minard david at scem.uws.edu.au
Thu Oct 1 00:24:59 UTC 2015


G'day All,

     I've been setting up a new set of DCs, using 4.2.3 and all was 
going well until I tried to get a 4th DC going.  I'm using bind_DLZ, and 
I think this is where I went wrong.

     I provisioned the new DC before having set up bind properly (I 
forgot to "yum install bind bind-util bind-libs") before hand.  The 
provision worked okay, except that it told me that it couldn't work out 
what version of bind was installed, and that I had to edit the 
"/usr/local/samba/private/named.conf" file.  Which I have done, and 
uncommented out the 9.9 line).

     Then, I started bind, and then samba.  All seemed well, except that 
it has replication errors.  So I went through the ownership of files, as 
described by the wiki, making changes as appropriate, and compared them 
to my other DCs. They now all seemed right.  bind and samba restarted.


samba-tool drs showrepl

   ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to 
samba4-40.samba4.scem.westernsydney.edu.au failed - drsException: DRS 
connection to samba4-40.samba4.scem.westernsydney.edu.au failed: 
(-1073741772, 'The object name is not found.')
   File 
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/drs.py", 
line 39, in drsuapi_connect
     (ctx.drsuapi, ctx.drsuapi_handle, ctx.bind_supported_extensions) = 
drs_utils.drsuapi_connect(ctx.server, ctx.lp, ctx.creds)
   File 
"/usr/local/samba/lib64/python2.7/site-packages/samba/drs_utils.py", 
line 54, in drsuapi_connect
     raise drsException("DRS connection to %s failed: %s" % (server, e))


I have the server name in /etc/hosts.  I have resolve.conf pointing to 
the other DCs.

If I "samba-tool drs showrepl samba4-40" I get

Default-First-Site-Name\SAMBA4-40
DSA Options: 0x00000001
DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
DSA invocationId: acea15ea-f471-42b9-84c3-8dc44bd98da4

==== INBOUND NEIGHBORS ====

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:37 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:37 2015 AEST

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:37 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:37 2015 AEST

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-20 via RPC
         DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
         Last attempt @ Thu Oct  1 10:13:37 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:37 2015 AEST

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:37 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:37 2015 AEST

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:37 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:37 2015 AEST

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-20 via RPC
         DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
         Last attempt @ Thu Oct  1 10:13:38 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:38 2015 AEST

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-20 via RPC
         DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:38 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:38 2015 AEST

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:38 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:38 2015 AEST

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-20 via RPC
         DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
         Last attempt @ Thu Oct  1 10:13:39 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:39 2015 AEST

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-20 via RPC
         DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
         Last attempt @ Thu Oct  1 10:13:36 2015 AEST failed, result 
8453 (WERR_DS_DRA_ACCESS_DENIED)
         205 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:36 2015 AEST

==== OUTBOUND NEIGHBORS ====

==== KCC CONNECTION OBJECTS ====

Connection --
     Connection name: 0809eed4-d61d-4c7f-89cb-f230311fc7e3
     Enabled        : TRUE
     Server DNS name : samba4-00.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-00,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
     Connection name: 78bb6883-6d6a-4c5c-9d6b-39f256823401
     Enabled        : TRUE
     Server DNS name : samba4-10.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-10,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
     Connection name: c91eece0-11bb-416f-888d-6e87e9439abf
     Enabled        : TRUE
     Server DNS name : samba4-20.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-20,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!



On another dc "samba-tool drs showrepl" gives me:

Default-First-Site-Name\SAMBA4-20
DSA Options: 0x00000001
DSA object GUID: 21a9f003-e429-4320-81c3-06e995652d11
DSA invocationId: e5e45b36-50e5-4f56-97d3-11e1cb7f1b22

==== INBOUND NEIGHBORS ====

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:55 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:55 2015 AEST

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:55 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:55 2015 AEST

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:13:55 2015 AEST failed, result 2 
(WERR_BADFILE)
         208 consecutive failure(s).
         Last success @ NTTIME(0)

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:55 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:55 2015 AEST

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:56 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:56 2015 AEST

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:13:56 2015 AEST failed, result 2 
(WERR_BADFILE)
         208 consecutive failure(s).
         Last success @ NTTIME(0)

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:54 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:54 2015 AEST

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:54 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:54 2015 AEST

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:13:54 2015 AEST failed, result 2 
(WERR_BADFILE)
         208 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:56 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:56 2015 AEST

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:56 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:56 2015 AEST

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:13:57 2015 AEST failed, result 2 
(WERR_BADFILE)
         208 consecutive failure(s).
         Last success @ NTTIME(0)

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ Thu Oct  1 10:13:54 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:54 2015 AEST

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ Thu Oct  1 10:13:54 2015 AEST was successful
         0 consecutive failure(s).
         Last success @ Thu Oct  1 10:13:54 2015 AEST

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:13:55 2015 AEST failed, result 2 
(WERR_BADFILE)
         208 consecutive failure(s).
         Last success @ NTTIME(0)

==== OUTBOUND NEIGHBORS ====

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:14:58 2015 AEST failed, result 2 
(WERR_BADFILE)
         12196 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:14:59 2015 AEST failed, result 2 
(WERR_BADFILE)
         12195 consecutive failure(s).
         Last success @ NTTIME(0)

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:14:58 2015 AEST failed, result 2 
(WERR_BADFILE)
         12197 consecutive failure(s).
         Last success @ NTTIME(0)

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=ForestDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:14:59 2015 AEST failed, result 2 
(WERR_BADFILE)
         12194 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-40 via RPC
         DSA object GUID: 072d7de1-f6f3-45e0-bbcd-4ba17b0054ab
         Last attempt @ Thu Oct  1 10:14:58 2015 AEST failed, result 2 
(WERR_BADFILE)
         12196 consecutive failure(s).
         Last success @ NTTIME(0)

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-00 via RPC
         DSA object GUID: 56352be2-bdf3-4a54-87a5-1355417519de
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

DC=DomainDnsZones,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
     Default-First-Site-Name\SAMBA4-10 via RPC
         DSA object GUID: 7fa7fc88-8d99-4217-b329-7e82324ec084
         Last attempt @ NTTIME(0) was successful
         0 consecutive failure(s).
         Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection --
     Connection name: 19cae640-3d3a-4c64-83f0-7cb99b8e2303
     Enabled        : TRUE
     Server DNS name : samba4-10.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-10,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
     Connection name: 9648274d-fbcc-4974-8e00-32dedef0482c
     Enabled        : TRUE
     Server DNS name : samba4-00.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-00,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
     Connection name: dd40f960-8f12-4d8e-8027-e4284a3e063b
     Enabled        : TRUE
     Server DNS name : samba4-40.samba4.scem.westernsydney.edu.au
     Server DN name  : CN=NTDS 
Settings,CN=SAMBA4-40,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au
         TransportType: RPC
         options: 0x00000001
Warning: No NC replicated for Connection!


Which is what I'd expect given that samba4-40 has issues.

So, I thought that I'd try to demote samba4-40 and re-try the domain join.

samb-tool domain demote -U administrator

Using samba4-00.samba4.scem.westernsydney.edu.au as partner server for 
the demotion
Password for [SCEM_AD\administrator]:
Deactivating inbound replication
Asking partner server samba4-00.samba4.scem.westernsydney.edu.au to 
synchronize from us
Error while demoting, re-enabling inbound replication
ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a 
DsReplicaSync for partion 
CN=Schema,CN=Configuration,DC=samba4,DC=scem,DC=westernsydney,DC=edu,DC=au 
- drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
   File 
"/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/domain.py", 
line 712, in run
     sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, 
str(part), drsuapi.DRSUAPI_DRS_WRIT_REP)
   File 
"/usr/local/samba/lib64/python2.7/site-packages/samba/drs_utils.py", 
line 83, in sendDsReplicaSync
     raise drsException("DsReplicaSync failed %s" % estr)



     HELP !!  I'm now stuck.  I've not seen "WERR_DS_DRA_ACCESS_DENIED" 
before, and I don't know how to fix it.

     I don't know if running the domain join again is a good idea, or if 
that will break more stuff....

-- 

Cheers,
David Minard.
Ph:    0247 360 155
Fax:    0247 360 770

School of Computing, Engineering, and Mathematics
Building Y - Penrith Campus (Kingswood)
Locked bag 1797
Penrith South DC
NSW 1797

[Sometimes waking up just isn't worth the insult of the day to come.]


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.




More information about the samba mailing list