[Samba] failes replication ldap, error SPN

[Andrew Bartlett]

On Mon, 2018-03-12 at 11:56 +0500, denis.shigapov wrote:
> but why not bring everything to the same register when checking?
> How do I understand Windows does not care about the register?

The problem looks simple, but multiple developers have had a go at
fixing it and not yet succeeded.  Ideally someone would advance
Douglas' patch and make it pass a full autobuild.

Sadly other parts of Samba are now built on the current, incorrect base
assumptions, so even when the LDB layer is fixed other layers may still
need rework.

Sorry,

Andrew Bartlett

> В Пн, 12/03/2018 в 19:43 +1300, Andrew Bartlett via samba пишет:
> > On Mon, 2018-03-12 at 11:33 +0500, denis.shigapov via samba wrote:
> > > this is a rather critical error.
> > > Do you have a patch for version 4.6 or 4.7?
> > 
> > No.  It turns out to be harder to fix than you might expect, you can
> > see the various efforts made to fix this over time in the bug history.
> > 
> > Andrew Bartlett
> > 
> > > В Пн, 12/03/2018 в 18:56 +1300, Andrew Bartlett via samba пишет:
> > > > On Mon, 2018-03-12 at 10:36 +0500, denis.shigapov via samba wrote:
> > > > > Good afternoon.
> > > > > how to overcome the problem,
> > > > > samba creates an SPN in the format computer_name.example.com (computer name in lower case) and Windows registers as CUMPUTER_NAME.example.com
> > > > > (computer
> > > > > name
> > > > > in uppercase).
> > > > > When synchronizing in the direction of Samba, 2 SPN entries appear
> > > > > computer_name.example.com
> > > > > CUMPUTER_NAME.example.com
> > > > > And on the windows side, there is a replication error, since by the logic of Windows DC it is 2 identical recordsds
> > > > 
> > > > This is bug https://bugzilla.samba.org/show_bug.cgi?id=8929
> > > > 
> > > > The last effort was in this thread:
> > > > 
> > > > https://lists.samba.org/archive/samba-technical/2018-January/124878.html
> > > > 
> > > > Andrew Bartlett
> > > > 
> > > > -- 
> > > > Andrew Bartlett                       http://samba.org/~abartlet/
> > > > Authentication Developer, Samba Team  http://samba.org
> > > > Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba
> > > > 
> > > > 
> > > 
> > > 
> > 
> > -- 
> > Andrew Bartlett                       http://samba.org/~abartlet/
> > Authentication Developer, Samba Team  http://samba.org
> > Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba
> > 
> > 
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba