[Samba] Fwd: Re: DsGetNCChanges 2nd replication on different

[Carlos]

Hi!!

Any idea ?


Regards.


On 09-05-2018 15:40, Carlos wrote:
>
> HI !
>
> I demote dc "same" name and rename dc, but same IP adresss.
>
> But erro persiste...
>
> DC "new name"
>
> May  9 15:34:39 dcXXX-NEW samba[12278]:   UpdateRefs failed with 
> WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 for 
> 37ba1799-307a-49ef-a6df-3657da7c4c98._msdcs.XXXX 
> DC=DomainDnsZones,DC=XXX,DC=XXX,DC=XXX,DC=XX
>
> 37ba1799-307a-49ef-a6df-3657da7c4c98 = dcXXX-NEW
>
> Any  ideia ?
>
> Others DCs have message:
>
>
> May  9 15:36:34 dzeta samba[22387]: [2018/05/09 15:36:34.419248,  0] 
> ../source4/rpc_server/drsuapi/getncchanges.c:1657(dcesrv_drsuapi_DsGetNCChanges)
> May  9 15:36:34 dzeta samba[22387]: 
> ../source4/rpc_server/drsuapi/getncchanges.c:1657: DsGetNCChanges 2nd 
> replication on different DN 
> CN=Schema,CN=Configuration,DC=XX,DC=XXX,DC=XXX,DC=XX 
> CN=Configuration,DC=XXX,DC=XXX,DC=XX,DC=XXX (last_dn 
> CN=b04efd5a-4691-4e94-87d6-2a1a3cf3a08c,CN=NTDS 
> Settings,CN=DCYYY,CN=Servers,CN=YYYY,CN=Sites,CN=Configuration,DC=XXX,DC=XXX,DC=XXX,DC=br)
>
> Regards;
>
>
>
>
> -------- Forwarded Message --------
> Subject: 	Re: [Samba] DsGetNCChanges 2nd replication on different
> Date: 	Wed, 9 May 2018 12:37:17 -0300
> From: 	Carlos <carlos.hollow at gmail.com>
> To: 	samba at lists.samba.org
>
>
>
> Hi
>
> I update samba to 4.7.7 in DC same "name", and execute
>
> # samba-tool dbcheck --cross-ncs
>
> Information
>
> Checked 5513 objects (5097 errors)
>
> but erro in dc same "name " is equal e other dcs too...
>
>
> :-(
>
> Regards;
>
>
>
>
> On 09-05-2018 11:31, Rowland Penny via samba wrote:
> > On Wed, 9 May 2018 11:02:45 -0300
> > Carlos via samba <samba at lists.samba.org>  wrote:
> >
> >> Thanks;
> >>
> >> but, i can use same name ou change name ?
> > Upgrading in situ, then yes you can use the same data and to be honest,
> > you should, but if you demote a DC, NEVER user the same name again
> > (well not until you are 100% positive there are no traces of the old
> > name in AD, probably at least 6 months down the line). This way you can
> > be sure of no problems. ;-)
> >
> > Rowland
> >
> >   
> >
> >
> >
>