[Samba] Replication issue (maybe due to 4.7.0 bug?)

[Gaetan SLONGO]

Hi, 


We are facing to a replication issue on a couple of DC. We are now on 4.7.3 but we have been on 4.7.0 and 4.7.1 shortly 


We have a replication issue (samba-tool ldapcmp shows errors). But when trying to full sync we also get errors : 



[root at dc ~]# samba-tool drs replicate nas dc DC=ads,DC=dom,DC=be --full-sync 
Processing section "[netlogon]" 
Processing section "[sysvol]" 
pm_process() returned Yes 
ldb_wrap open of secrets.ldb 
GENSEC backend 'gssapi_spnego' registered 
GENSEC backend 'gssapi_krb5' registered 
GENSEC backend 'gssapi_krb5_sasl' registered 
GENSEC backend 'spnego' registered 
GENSEC backend 'schannel' registered 
GENSEC backend 'naclrpc_as_system' registered 
GENSEC backend 'sasl-EXTERNAL' registered 
GENSEC backend 'ntlmssp' registered 
GENSEC backend 'ntlmssp_resume_ccache' registered 
GENSEC backend 'http_basic' registered 
GENSEC backend 'http_ntlm' registered 
GENSEC backend 'krb5' registered 
GENSEC backend 'fake_gssapi_krb5' registered 
Using binding ncacn_ip_tcp:nas[,seal] 
Mapped to DCERPC endpoint 135 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20> 
Mapped to DCERPC endpoint 1024 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20> 
Received smb_krb5 packet of length 250 
Received smb_krb5 packet of length 1279 
Received smb_krb5 packet of length 1294 
Received smb_krb5 packet of length 1312 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128 
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20> 
Received smb_krb5 packet of length 1294 
Received smb_krb5 packet of length 1312 
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP') 
File "/usr/lib64/python2.7/site-packages/samba/netcmd/drs.py", line 386, in run 
drs_utils.sendDsReplicaSync(server_bind, server_bind_handle, source_dsa_guid, NC, req_options) 
File "/usr/lib64/python2.7/site-packages/samba/drs_utils.py", line 85, in sendDsReplicaSync 
raise drsException("DsReplicaSync failed %s" % estr) 






and on the destination server, in the logs : 



==> /var/log/samba/log.samba <== 
[2017/12/07 10:10:55.825907, 0] ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger) 
Failed to commit objects: WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE 




I can't find what is causing this error and the error message doesnt give a lot of informations 


Do you have any idea ? 


Thanks !