[Samba] Joining a Windows Server 2008 R2 to existing Samba4 domain

Chris Alavoine chrisa at acs-info.co.uk
Fri Oct 14 14:35:08 UTC 2016

Hi Marc,

Thanks for your reply.

We are using BIND9_DLZ currently as the DNS backend

I manually selected a replication partner (the FSMO roles DC).

We do have some errors when doing a dbcheck but I'm not able to fix them.
I've detailed this in another post.

Here is an example of each type:

*ERROR: incorrect GUID component for member in object
CN=examplegroup,OU=Groups,DC=example,DC=internal,DC=com -

*ERROR: incorrect DN string component for member in object
CN=admin-group-001,OU=Groups,DC=example,DC=internal,DC=com -

*unable to find object for DN
CN=test.user2,CN=Users,DC=example,DC=internal,DC=com - (No such Base DN:
*Not removing dangling forward link*

I have edited these entries to maintain anonymity.

Any ideas on how to remove these errors?

Thanks again,

On 14 October 2016 at 15:17, Marc Muehlfeld <mmuehlfeld at samba.org> wrote:

> Hi Chris,
> Am 14.10.2016 um 11:53 schrieb Chris Alavoine via samba:
> > https://wiki.samba.org/index.php/Joining_a_Windows_Server_
> 2008_/_2008_R2_DC_to_a_Samba_AD
> >
> > but have never managed to get full replication working.
> >
> > Could this be because I'm coming from a classicupgrade? Has anyone else
> out
> > there managed to get this working?
> I'm the author of this documentation. I recently rewrote it and at the
> same time retested the procedure with 4.5.0 and everything worked.
> However, I know this does not help you. :-)
> * What DNS back end do you use? Internal or BIND9_DLZ?
> * Did you let 2008 auto-select a replication partner during the dcpromo
> or did you select a specific DC?
> * Does "samba-tool dbcheck --cross-ncs" shows any errors? Fix them.
> Regards,
> Marc

ACS (Alavoine Computer Services Ltd)
Chris Alavoine
mob +44 (0)7724 710 730

More information about the samba mailing list