[Samba] group policy update fails

[L.P.H. van Belle]

Ok just to verify. 

DC name= 
ad41.dc.samges.ru

dnsdomain= dc.samges.ru 

Kerberos domain ?? 

Im guessing you kerberos to dnsdomain mapping is wrong. 
Can you post the 
/etc/hosts
/etc/resolv.conf
/etc/krb5.conf 

And, can you post this line u used for provisioning?


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: Mike Lykov [mailto:combr at samges.ru]
> Verzonden: vrijdag 18 november 2016 12:20
> Aan: L.P.H. van Belle
> Onderwerp: Re: [Samba] group policy update fails
> 
> 18.11.2016 12:04, L.P.H. van Belle via samba ??????????:
> > This looks all good.
> >
> > Can you check you database replication with my script.
> > http://downloads.van-belle.nl/samba4/samba-check-db-repl.sh
> > It does some basic checked to detect the AD DC's.
> > And it compaires the ad db database in 2 ways.
> 
> May I ask you about my results interpretation?
> 
> -------------
> Result for [DOMAIN]: FAILURE
> Attributes found only in ldap://ad41.dc.samges.ru:
>      msDS-NcType
>      serverState
> Result for [CONFIGURATION]: FAILURE
> Attributes found only in ldap://ad41.dc.samges.ru:
>      msDS-NcType
>      subRefs
> 
> Result for [SCHEMA]: FAILURE
> Attributes found only in ldap://ad41.dc.samges.ru:
>      msDS-NcType
> ---------------
> 
> What is this attributes means, why they could not replicate?
> And how to fix this case?
> "samba drs showrepl" show all is ok.
> 
> -----------
> * Comparing [DNSDOMAIN] context...
> Failed search of base=DC=DomainDnsZones,DC=dc,DC=samges,DC=ru
> ------------
> 
> Why it can happen?
> 
> 
> --
> Mike Lykov, system administrator