[Samba] Replicate with --full-sync error

[Andrew Bartlett]

On Fri, 2018-08-31 at 11:40 +0300, Taner Tas via samba wrote:
> Hi,
> 
> I tried to replicate two DC's (on test setup) with "--full-sync" option
> but fails with error message below. I tried "--full-sync" because I
> wonder if it has any effect on some diverged entries reported
> by "samba-tool ldapcmp".
> 
> # samba-tool drs replicate dc1 dc2 --full-sync DC=samdom,DC=com
> 
> ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to dc1
> failed - drsException: DRS connection to dc1 failed: (3221225653,
> '{Device Timeout} The specified I/O operation on %hs was not completed
> before the time-out period expired.') File
> "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 44, in
> drsuapi_connect (ctx.drsuapi, ctx.drsuapi_handle,
> ctx.bind_supported_extensions) = drs_utils.drsuapi_connect(ctx.server,
> ctx.lp, ctx.creds) File
> "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 58, in
> drsuapi_connect raise drsException("DRS connection to %s failed: %s" %
> (server, e))
> 
> Same command without "--full-sync" option doesn't give this error.

Try adding --local  

This will do the work in the local python process and so might avoid
one of the steps in between timing out.

Andrew Bartlett

> Both DC's Samba 4.8.4
> Ubuntu 18.0.4
> BIND9_DLZ
> 
> ---
> Taner Tas
> 
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba