[Samba] AD Replication issues due to lingering objects

Tom Cannaerts - INTRACTO tom.cannaerts at intracto.com
Wed Jan 4 22:56:59 UTC 2017


I managed to install it, but unfortunately it did not solve the problem. I
ended up removing the DC from the AD the hard way and rejoined it.
Replication is working in both ways, except for the DNS zones but I'm shoot
in a new e-mail for that, as that doesn't relate to this issue anymore.

Thanks for all the help!



Op wo 4 jan. 2017 om 09:52 schreef L.P.H. van Belle <belle at bazuin.nl>:

> Hai Tom,
>
> Sure, you can apt-get install from that repo.
>
> You have 3 options.
> 1) http://apt.van-belle.nl/  the apt repo.
> Use it like any apt repo. Info on the site.
>
> 2) http://downloads.van-belle.nl/samba4/samba-4.5.3/ and use the installer
> This is when you want to get packages localy in you network and when you
> want to keep one version, and/or distribute this internaly.
> The installer script takes care of most of this setup.
> It starts with a deb file://path_to_debs/ switch to http is easy done by.
> Installing apache2 ( or other webserver) and change file:// to http://
>
> Do it yourself, make a deb.
> 3) Get the packages or sources from debian stretch and build them yourself,
> The debian TESTING/Stretch now 4.5.2-2 version = samba 4.5.3
>
> How are my packages build?
> Same way as the backported packages, in a pbuilder environment.
> Only these 4.5.3, i build myself, at that time there was no debian package.
> Normaly i follow the TESTING (stretch) packages for rebuilding exept in
> case of security fixes.
>
> When are packages going in the repo?
> After i've tested them in my office network and when im in production with
> these for at least a week.
> Only then i upgrade the repo packages.
>
> When dont you want to use my repo.
> If you want to stay in one version, like now with debian the 4.2.x line
> and you dont keep track of samba changes smb.conf.
> The defaults have changed a lot since 4.2.10.
> These "behaivor changes" is what is keeping samba at 4.2.x in debian.
> A logical choice but some like me wanted new futures, which are in 4.5.x
> and i saw a few bug fixes which i wanted in 4.5.3.
> This is why i build my own.
>
> The next apt repo update will be after a security update of if there are
> really annoying bugs fixed or after tracking the samba list messages and
> something special comes up.
>
> But with any repo update i post it also on the list.
>
> Handy things.
> Read the http://downloads.van-belle.nl/samba4/README.txt
> this one has good info about the builds.
>
> The http://downloads.van-belle.nl/samba4/Upgrade-info.txt
> contains the change history, this is same as on the samba.org site,
> so all credits to the samba dev here, i just summeraized the changes.
>
> current-packages-in-apt.txt says what it is.
> The apt packages listed in the apt repo.
>
> Good lock and if you have questions, just ask.
> Preffered through the samba list.
>
>
> Greetz,
>
> Louis
> GPG Key fingerprint = 3843 C126 C596 738E 7C87  75B5 E6F6 A3C7 EB7A 89CF
>
>
>
> > -----Oorspronkelijk bericht-----
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Tom Cannaerts -
> > INTRACTO via samba
> > Verzonden: dinsdag 3 januari 2017 22:02
> > Aan: Rowland Penny; samba at lists.samba.org
> > Onderwerp: Re: [Samba] AD Replication issues due to lingering objects
> >
> > Do you tnink I can simply apt-get install from that repo to upgrade the
> > current samba?
> >
> > Going down the demote/re-join route, I'm encountering problems demoting
> > the
> > DC:
> >
> > Deactivating inbound replication
> > Asking partner server DC1.mydomain.local to synchronize from us
> > Error while demoting, re-enabling inbound replication
> > ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a
> > DsReplicaSync for partion DC=mydomain,DC=local - drsException:
> > DsReplicaSync failed (8240, 'WERR_DS_NO_SUCH_OBJECT')
> >   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
> > 712,
> > in run
> >     sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part),
> > drsuapi.DRSUAPI_DRS_WRIT_REP)
> >   File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 83, in
> > sendDsReplicaSync
> >     raise drsException("DsReplicaSync failed %s" % estr)
> >
> > What are the steps to force the DC2 (samba) server to forget about
> > everything and get it in a state where I can re-join it to the domain as
> a
> > domaincontroller? I can remove the DC from the AD using a metadata
> cleanup
> > on the Windows DC, but what do I need to do on the samba server? There's
> > more on that server, so I can't just destroy it and install it from
> > scratch.
> >
> >
> > Op ma 2 jan. 2017 om 15:35 schreef Rowland Penny via samba <
> > samba at lists.samba.org>:
> >
> > On Mon, 02 Jan 2017 12:22:07 +0000
> > Tom Cannaerts - INTRACTO <tom.cannaerts at intracto.com> wrote:
> >
> > > We're using the Debian 8 repository version, which is 4.2.14
> > >
> > > Tom
> > >
> > >
> >
> > I don't know if you can/want to use them, but one of the regular posters
> > on this list, Louis Van Belle, maintains his own version of the latest
> > samba debs for Jessie here:
> >
> > https://downloads.van-belle.nl/samba4/samba-4.5.3/
> >
> > Rowland
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> > --
> > Met vriendelijke groeten,
> > Tom Cannaerts
> >
> >
> > *Service and MaintenanceIntracto - digital agency*
> >
> > Zavelheide 15 - 2200 Herentals
> > Tel: +32 14 28 29 29 <+32%2014%2028%2029%2029>
> > www.intracto.com
> >
> >
> > Ben je tevreden over deze e-mail?
> >
> > <http://www.intracto.com/feedback?user=tom.cannaerts&response_code=5>
> > <http://www.intracto.com/feedback?user=tom.cannaerts&response_code=4>
> > <http://www.intracto.com/feedback?user=tom.cannaerts&response_code=3>
> > <http://www.intracto.com/feedback?user=tom.cannaerts&response_code=2>
> > <http://www.intracto.com/feedback?user=tom.cannaerts&response_code=1>
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
>
>
> --
Met vriendelijke groeten,
Tom Cannaerts


*Service and MaintenanceIntracto - digital agency*

Zavelheide 15 - 2200 Herentals
Tel: +32 14 28 29 29
www.intracto.com


Ben je tevreden over deze e-mail?

<http://www.intracto.com/feedback?user=tom.cannaerts&response_code=5>
<http://www.intracto.com/feedback?user=tom.cannaerts&response_code=4>
<http://www.intracto.com/feedback?user=tom.cannaerts&response_code=3>
<http://www.intracto.com/feedback?user=tom.cannaerts&response_code=2>
<http://www.intracto.com/feedback?user=tom.cannaerts&response_code=1>


More information about the samba mailing list