[Samba] LDAP mismatch between DCs
lists at merit.unu.edu
Thu Apr 14 06:16:56 UTC 2016
I think this is expected. You should filter whenChanged out, when doing
ldapcmp, with --filter=whenChanged
On 04/14/2016 04:02 AM, John Gardeniers wrote:
> Running "samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator" on
> our production system results in mismatches for items in the domain
> * Comparing [DOMAIN] context...
> * Objects to be compared: 625
> 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC1]
> 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC2]
> Difference in attribute values:
> whenChanged =>
> This is repeated for all other entries in the section, although the
> timestamps differ. All other sections match perfectly.
> Is this something to be concerned about or can it be safely ignored?
More information about the samba