[Samba] Error "Failed extended allocation RID pool operation..."

[Adam Tauno Williams]

On Mon, 2016-09-19 at 16:15 +0100, Rowland Penny via samba wrote:
> On Mon, 19 Sep 2016 10:42:34 -0400
> Adam Tauno Williams via samba <samba at lists.samba.org> wrote:

> > On Mon, 2016-09-19 at 15:15 +0100, Rowland Penny via samba wrote:
> > > No it shouldn't be replicated, the big hint is
> > > 'FLAG_ATTR_NOT_REPLICATED', it should only be on the DC that 
> > > holds the RID master FSMO role, so I supposed the question is, 
> > > what does 'samba-tool fsmo show' display for the
> > > RidAllocationMasterRole ?
> Log into a DC, run 'samba-tool fsmo show' and look at the line that
> starts 'RidAllocationmasterRole'
> It should show 'CN=NTDS Settings,CN=LARKIN27'

[root at larkin28 ~]# samba-tool fsmo show
..
RidAllocationMasterRole owner: CN=NTDS
Settings,CN=LARKIN27,CN=Servers,CN=Default-First-Site
-Name,CN=Sites,CN=Configuration,DC=micore,DC=us
...

> > Try running this on the DC: ldbsearch -H/usr/local/samba/private/sa
> > m.ldb '(objectClass=rIDSet)' dn rIDNextRID
> It should should show the DN's of your DCs followed by the contents
> of the 'rIDNextRID' attributes. these should be '0' on all DC's 
> except the RID master.


[root at larkin28 ~]# ldbsearch -H /var/lib/samba/private/sam.ldb 
 '(objectClass=rIDSet)' dn rIDNextRID
# record 1
dn: CN=RID Set,CN=LARKIN26,OU=Domain Controllers,DC=micore,DC=us
# record 2
dn: CN=RID Set,CN=LARKIN27,OU=Domain Controllers,DC=micore,DC=us
# record 3
dn: CN=RID Set,CN=LARKIN28,OU=Domain Controllers,DC=micore,DC=us
rIDNextRID: 53611
# Referral
ref: ldap://micore.us/CN=Configuration,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=DomainDnsZones,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=ForestDnsZones,DC=micore,DC=us
# returned 6 records
# 3 entries
# 3 referrals


[root at larkin27 ~]# ldbsearch -H /var/lib/samba/private/sam.ldb 
 '(objectClass=rIDSet)' dn rIDNextRID
# record 1
dn: CN=RID Set,CN=LARKIN26,OU=Domain Controllers,DC=micore,DC=us
# record 2
dn: CN=RID Set,CN=LARKIN27,OU=Domain Controllers,DC=micore,DC=us
rIDNextRID: 55584
# record 3
dn: CN=RID Set,CN=LARKIN28,OU=Domain Controllers,DC=micore,DC=us
# Referral
ref: ldap://micore.us/CN=Configuration,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=DomainDnsZones,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=ForestDnsZones,DC=micore,DC=us
# returned 6 records
# 3 entries
# 3 referrals


[root at larkin27 ~]#  ldbsearch -H /var/lib/samba/private/sam.ldb 
 '(objectClass=rIDSet)' dn rIDNextRID
# record 1
dn: CN=RID Set,CN=LARKIN26,OU=Domain Controllers,DC=micore,DC=us
# record 2
dn: CN=RID Set,CN=LARKIN27,OU=Domain Controllers,DC=micore,DC=us
rIDNextRID: 55584
# record 3
dn: CN=RID Set,CN=LARKIN28,OU=Domain Controllers,DC=micore,DC=us
# Referral
ref: ldap://micore.us/CN=Configuration,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=DomainDnsZones,DC=micore,DC=us
# Referral
ref: ldap://micore.us/DC=ForestDnsZones,DC=micore,DC=us
# returned 6 records
# 3 entries
# 3 referrals


-- 
Adam Tauno Williams <mailto:awilliam at whitemice.org> GPG D95ED383
Systems Administrator, Python Developer, LPI / NCLA