[Samba] Samba+LDAP problem after replacing BDC

Rowland Penny rpenny at samba.org
Wed Aug 22 12:40:01 UTC 2018

On Wed, 22 Aug 2018 13:53:23 +0200
Ludovit Koren via samba <samba at lists.samba.org> wrote:

> Hi,
> I had a working enviroment of one PDC and several BDCs. The PDC is
> Samba version 3.6.6. After replacing of one BDC, I've started to get
> the following error in LDAP master server:
> Aug 22 13:44:59 gw slapd[28598]: conn=46129 op=51 do_search: invalid
> dn (sambaDomainName=Administrator,(null))
> and on the PDC:
> root@:~# net getlocalsid
> smbldap_search_domain_info: Adding domain info for XXX failed with
> S-1-5-21-967619648-2110556011-518741233
> I cannot add any new computer to the domain. Everything else seems to
> be working.
> I did not find any hint to the error. Could you point what the problem
> could be?
> Thank you very much in advance.
> Regards,
> lk

Can you post your smb.conf.

what version of Samba is the new BDC using ?

From the number of posts we get on PDC problems and tests I have done,
I think that the changes required for AD might have broken NT4-style

Irrespective of the above, can I advise you to upgrade to AD, Samba
'might' have broken NT4-style domains by accident, but it looks like
Microsoft is removing connection by design.


More information about the samba mailing list