[Samba] Error in Second Samba Domain Controller

Nicholas Rudd nicholas.m.rudd at gmail.com
Wed Mar 23 13:21:32 UTC 2016


So a little background, in my domain we have 2 domain controllers, the main
(A Windows Server 2008 R2), and a secondary that is was recently migrated
from Server 2003 R2 to Samba. Both domain controllers are offsite so we use
OpenVpn to connect them, dns is set to the samba domain controller then the
Windows server, this is due that the samba domain controller is up 24/7
while the Windows is only up for certain hours. So heres the problem, I can
still login to the domain when the main domain controller is online,
however as soon as it goes offline I can no longer login, I can still get
online so I know DNS is kinda working, however when issuing "samba-tool drs
showrepl"on the second domain controller I get

**ERROR(<class 'samba.drs_utils.drsException'*










*>): DRS connection toip-172-31-15-16.ad.mydomain.com
<http://ip-172-31-15-16.ad.mydomain.com/> <
<http://ip-172-31-15-16.ad.mydomain.com/>http://ip-172-31-15-16.ad
<http://ip-172-31-15-16.ad/> .mydomain.com <http://mydomain.com>>failed -
drsException: DRS connection to ip-172-31-15-16.ad.mydomain.com
<http://ip-172-31-15-16.ad.mydomain.com/><
<http://ip-172-31-15-16.ad.mydomain.com/>http://ip-172-31-15-16.ad
<http://ip-172-31-15-16.ad/> .mydomain.com <http://mydomain.com>> failed:
(-1073741772, 'The objectname is not found.')**  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/drs.py",line 39,
in drsuapi_connect**    (ctx.drsuapi, ctx.drsuapi_handle,
ctx.bind_supported_extensions) =drs_utils.drsuapi_connect(ctx.server,
ctx.lp, ctx.creds)**  File
"/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py",line 54,
in drsuapi_connect**    raise drsException("DRS connection to %s failed:
%s" % (server, e))**

This is interesting becuase the IP that it is looking for is not mine, mine
is ip-172-31-15-161.ad.mylocaldomain.com

, I have logged into the DNS
management console many times and checked the records on the second (and
first) domain controller and the records look correct. Any suggestions?
-- 
Nicholas Rudd


More information about the samba mailing list