[Samba] Schema Change Breaks Replication

[Adam Tauno Williams]

After upgrade to Samba 4.5.1 the replication is still accumulating
errors related to schema.

...
[2016/11/21 09:30:45.571862,  0]
../source4/rpc_server/drsuapi/getncchanges.c:1905(dcesrv_drsuapi_DsGetN
CChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:1905: DsGetNCChanges 2nd
replication on DN DC=micore,DC=us older highwatermark (last_dn
CN=Personel,CN=Users,DC=micore,DC=us)
[2016/11/21 09:30:45.573362,  2]
../source4/rpc_server/drsuapi/getncchanges.c:1490(getncchanges_collect_
objects)
  ../source4/rpc_server/drsuapi/getncchanges.c:1490: getncchanges on
DC=micore,DC=us using filter (uSNChanged>=1)
[2016/11/21 09:30:45.731436,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5103(replmd_replicat
ed_apply_merge)
  Discarding older DRS attribute update to dnsRecord on
DC=PC03574,DC=micore.us,CN=MicrosoftDNS,DC=DomainDnsZones,DC=micore,DC=
us from eae9ebb0-429b-44de-8582-c58abdf611ce
[2016/11/21 09:30:45.731489,  3]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5103(replmd_replicat
ed_apply_merge)
  Discarding older DRS attribute update to dNSTombstoned on
DC=PC03574,DC=micore.us,CN=MicrosoftDNS,DC=DomainDnsZones,DC=micore,DC=
us from eae9ebb0-429b-44de-8582-c58abdf611ce
[2016/11/21 09:30:45.900456,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_
commit)
  Replicated 1 objects (0 linked attributes) for
DC=DomainDnsZones,DC=micore,DC=us
[2016/11/21 09:30:46.201141,  0]
../source4/dsdb/schema/schema_syntax.c:2752(dsdb_attribute_drsuapi_remo
te_to_local)
  ../source4/dsdb/schema/schema_syntax.c:2752: Unknown local
attributeID_id 0x80820E75 remote 0x80820E75
[2016/11/21 09:30:46.204447,  0]
../source4/dsdb/repl/replicated_objects.c:734(dsdb_replicated_objects_c
onvert)
  Failed to convert object CN=Recipient Management,OU=Microsoft
Exchange Security Groups,DC=micore,DC=us: WERR_DS_ATT_NOT_DEF_IN_SCHEMA
[2016/11/21 09:30:46.204626,  0]
../source4/dsdb/repl/drepl_out_helpers.c:908(dreplsrv_op_pull_source_ap
ply_changes_trigger)
  Failed to convert objects:
WERR_DS_ATT_NOT_DEF_IN_SCHEMA/NT_STATUS_INVALID_NETWORK_RESPONSE
[2016/11/21 09:30:46.506030,  2]
../source4/dsdb/repl/replicated_objects.c:1016(dsdb_replicated_objects_
commit)
  Replicated 0 objects (0 linked attributes) for
DC=DomainDnsZones,DC=micore,DC=us
[2016/11/21 09:30:46.606197,  2]
../source4/rpc_server/drsuapi/getncchanges.c:516(get_nc_changes_add_la)
   Search of guid 30181ffd-4d35-4f45-9352-37b2019a617a returned 0
objects, skipping it !


[root at larkin26 ~]# samba-tool drs showrepl larkin26
ldb_wrap open of secrets.ldb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Using binding ncacn_ip_tcp:larkin26[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name larkin26<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name larkin26<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name larkin26<0x20>
Default-First-Site-Name\LARKIN26
DSA Options: 0x00000001
DSA object GUID: 3a74ac28-1613-471f-ac3d-1b8932eeb167
DSA invocationId: 7e0030ce-36a1-439c-91b6-f1de73ff7a81

==== INBOUND NEIGHBORS ====

...

CN=Schema,CN=Configuration,DC=micore,DC=us
	Default-First-Site-Name\TEMP2008R2DC via RPC
		DSA object GUID: c8d5c583-a097-4265-858a-cb67797ebb05
		Last attempt @ Mon Nov 21 09:30:40 2016 EST failed,
result 58 (WERR_BAD_NET_RESP)
		4625 consecutive failure(s).

...

DC=micore,DC=us
	Default-First-Site-Name\TEMP2008R2DC via RPC
		DSA object GUID: c8d5c583-a097-4265-858a-cb67797ebb05
		Last attempt @ Mon Nov 21 09:33:26 2016 EST failed,
result 58 (WERR_BAD_NET_RESP)
		10458 consecutive failure(s).
		Last success @ Fri Nov  4 15:03:27 2016 EDT

...

CN=Configuration,DC=micore,DC=us
	Default-First-Site-Name\TEMP2008R2DC via RPC
		DSA object GUID: c8d5c583-a097-4265-858a-cb67797ebb05
		Last attempt @ Mon Nov 21 09:30:44 2016 EST failed,
result 58 (WERR_BAD_NET_RESP)
		4621 consecutive failure(s).
		Last success @ Fri Nov  4 14:48:55 2016 EDT

-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA