[Samba] Server 2008R2 won't join 4.5.0 Domain

[Thomas Maerz]

This is actually a similar scenario to mine, I neglected to mention that before this happened, I had joined a Server 2008 R2 to the domain and promoted it to FSMO, then moved FSMO back to S4 DC and demoted the Server 2008 R2 controller.

I did what you suggested and it worked! I am assuming this is a bug. Thank you for your suggestion.

Thomas Maerz
> On Nov 9, 2016, at 3:59 AM, Kelvin Yip via samba <samba at lists.samba.org> wrote:
> 
> Hello,
> 
> I am using 4.5.1, the first time I promote a Windows 2008 R2 as a domain controller, everything is fine.
> After that, I demote 1 Windows 2008 R2 and 1 Samba DC(4.5.1). Then I promote a Windows 2008 R2 DC again, I get the exact problem as yours. I cancel the process.
> Then I ran to DC with all FSMO roles, and type the following command several times:
> samba-tool dbcheck --cross-ncs --fix --yes
> samba-tool dbcheck --cross-ncs --fix --yes 'fix_replmetadata_unsorted_attid'
> 
> There is still errors, but less than before.
> Now, I promote Windows 2008 R2 DC again and everything works fine.
> Hope it helps.
> 
> Best,
> Kelvin Yip
> 
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Thomas Maerz via samba
> Sent: Wednesday, November 9, 2016 12:55 AM
> To: samba <samba at lists.samba.org>
> Subject: [Samba] Server 2008R2 won't join 4.5.0 Domain
> 
> Hello,
> 
> I can’t get a fully patched Server 2008 R2 DC to finish DCPROMO joining as a domain controller to my Samba4 AD domain.
> 
> dcpromo.exe begins replication but gets stuck on “Replicating data CN=Configuration,DC=samdom,DC=contoso,DC=com: Received 1999 off of approximately 1999 objects and 74 out of approximately 74 distinguished name (DN) values…
> 
> Examining the dcpromo.log file just shows thousands of these messages repeating indefinitely. I have left it for hours and nothing has changed.
> 
> After searching the internet I’ve run into a few things I think might be relevant, but I can’t figure out a way to correct it.
> 
> This person had similar symptoms: https://lists.samba.org/archive/cifs-protocol/2011-June/001954.html <https://lists.samba.org/archive/cifs-protocol/2011-June/001954.html> The thread just mysteriously ended though with no resolution, and their issue was occurring during boot.
> 
> I am also seeing lots of errors with samba-tool dbcheck:
> 
> ERROR: incorrect GUID component for member in object CN=arc_info,OU=Groups,DC=samdom,DC=contoso,DC=com - <GUID=d6a2ae825b3487459f31010ce5c2ecb0>;<RMD_ADDTIME=130396389260000000>;<RMD_CHANGETIME=130458616690000000>;<RMD_FLAGS=1>;<RMD_INVOCID=71d80bb55484734b90ba2875af7fcfb7>;<RMD_LOCAL_USN=22603>;<RMD_ORIGINATING_USN=22603>;<RMD_VERSION=1>;<SID=010500000000000515000000304c563cc305b2f7e2cb6a3c56160000>;CN=Kay Jones,CN=Users,DC=ad,DC=brewerscience,DC=com
> unable to find object for DN CN=User K,CN=Users,DC=samdom,DC=contoso,DC=com - (No such Base DN: CN=User K,CN=Users,DC=ad,DC=brewerscience,DC=com)
> Not removing dangling forward link
> ERROR: incorrect DN string component for member in object CN=Test ITAR,OU=Test Groups,DC=ad,DC=brewerscience,DC=com - <GUID=e6261396-5bbc-4136-9728-37bde2789391>;<RMD_ADDTIME=130354186220000000>;<RMD_CHANGETIME=130374712860000000>;<RMD_FLAGS=1>;<RMD_INVOCID=5a39a061-2ec9-4e95-adf8-539291ecd2ea>;<RMD_LOCAL_USN=4330>;<RMD_ORIGINATING_USN=4069>;<RMD_VERSION=1>;<SID=S-1-5-21-1012288560-4155639235-1013631970-1112>;CN=Test User,CN=Users,DC=ad,DC=brewerscience,DC=com
> Not fixing string component mismatch
> Please use --fix to fix these errors
> 
> —fix does not fix the errors at all. I see this bug is present:
> 
> https://bugzilla.samba.org/show_bug.cgi?id=12297 <https://bugzilla.samba.org/show_bug.cgi?id=12297>
> 
> Is it possible that this issue is related to my inability to join the domain controller? Is there a way around this?
> 
> Thomas Maerz
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba