[Samba] Joining a Windows Server 2008 R2 to existing Samba4 domain

[Rowland Penny]

On Fri, 14 Oct 2016 15:35:08 +0100
Chris Alavoine via samba <samba at lists.samba.org> wrote:

> Hi Marc,
> 
> Thanks for your reply.
> 
> We are using BIND9_DLZ currently as the DNS backend
> 
> I manually selected a replication partner (the FSMO roles DC).
> 
> We do have some errors when doing a dbcheck but I'm not able to fix
> them. I've detailed this in another post.
> 
> Here is an example of each type:
> 
> Example1:
> *ERROR: incorrect GUID component for member in object
> CN=examplegroup,OU=Groups,DC=example,DC=internal,DC=com -
> <GUID=77ad92b5ade70e449dcc481624928310>;<RMD_ADDTIME=130393476680000000>;<RMD_CHANGETIME=130976799640000000>;<RMD_FLAGS=1>;<RMD_INVOCID=98307faefea70749933e6946b1b14420>;<RMD_LOCAL_USN=1445979>;<RMD_ORIGINATING_USN=303848>;<RMD_VERSION=1>;<SID=010500000000000515000000e8e83f391df4408a63c6a6b4d25a0000>;CN=simon.test,CN=Users,DC=example,DC=internal,DC=com*
> 
> Example2:
> *ERROR: incorrect DN string component for member in object
> CN=admin-group-001,OU=Groups,DC=example,DC=internal,DC=com -
> <GUID=38370cfc-6751-49bb-945e-d2b5e028f0f3>;<RMD_ADDTIME=130941544260000000>;<RMD_CHANGETIME=130941560040000000>;<RMD_FLAGS=1>;<RMD_INVOCID=a65d0f39-311e-4031-aa56-a8585bfc1b8f>;<RMD_LOCAL_USN=1443123>;<RMD_ORIGINATING_USN=1443123>;<RMD_VERSION=1>;<SID=S-1-5-21-960489704-2319512605-3030828643-1219569>;CN=user.test,OU=Test
> OU,DC=example,DC=internal,DC=com*
> 
> Example3:
> *unable to find object for DN
> CN=test.user2,CN=Users,DC=example,DC=internal,DC=com - (No such Base
> DN: CN=test.user2,CN=Users,DC=example,DC=internal,DC=com)*
> *Not removing dangling forward link*
> 
> I have edited these entries to maintain anonymity.
> 
> Any ideas on how to remove these errors?
> 

There appears to be a bug report for this:

https://bugzilla.samba.org/show_bug.cgi?id=12297

The last comment on that is:

We're hoping to backport this soon. But before all that, can you please
patch dbcheck and run it to confirm you see a new error message ('Try
running "samba-tool domain tombstones expunge"')?

Rowland