[Samba] possible to use ldbedit in a safe way

[Andrew Bartlett]

On Tue, 2017-10-17 at 11:42 +0200, mj wrote:
> 
> On 10/17/2017 11:22 AM, Andrew Bartlett wrote:
> > 
> > Can you please be less vague on what the link is exactly?  A suggestion
> > around the office from Garming was that we should:
> 
> Oh sure! I posted that info already, I think, but this is the error:
> 
> > ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object CN=84bea0a7-82dd-4237-9296-030573700698,CN=Partitions,CN=Configuration,DC=samba,DC=company,DC=com - <GUID=81a27497-bdfb-4977-9874-675bbfba490f>;<RMD_ADDTIME=130405075610000000>;<RMD_CHANGETIME=130405075610000000>;<RMD_FLAGS=0>;<RMD_INVOCID=556b2cb4-e576-48e2-bb7c-7f62caee84fc>;<RMD_LOCAL_USN=4605>;<RMD_ORIGINATING_USN=3630>;<RMD_VERSION=0>;CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
> 
> 
> > In particular, I think it would be quite safe to clean up a dangling
> > forward link within the same partition in:
> >   - msDS-masteredBy
> >   - masteredBy
> >   - fSMORoleOwner
> >   - msDS-NC-Replica-Locations
> 
> So, good news :-) That's exactly what we're seeing here.
> 
> So, all in all, thanks for this valuable information, I'll just go ahead 
> and delete it!

That should be fine.  BTW, all the dbcheck tool is going to do is
delete the attribute value, I'm working on a patch to do that for the
one-way-link case.  I'll hold off on two-way links for now, as well as
the cross-partition case.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba