[Samba] Bad DSA objectGUID ed8970e5-84cc-43dd-89f1-4af8d6ab675a for sid S-1-5-21-570971082-1333357699-3675202899-1375

[Andrew Bartlett]

On Fri, 2018-02-09 at 14:57 +0800, adam_xu--- via samba wrote:
> Andrew Bartlett, samba
>         Think you for your reply.
>         I know the process to resovle the problem now. first ,I need transferring and Seizing FSMO Roles to DC2 and then demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again.  Right?
>         Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1? 

Unless you have un-replicated data, I really wouldn't try that.  

Just seize the roles and re-create DC1 by joining it. 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba