[Samba] Different LDAP query in different DC...

Marco Gaiarin gaio at sv.lnf.it
Mon Nov 26 16:16:42 UTC 2018


I need to do a simple query, against some LDAP data in 'laster draft
schema' format i've added to te samba/AD schema.

All LDAP query return the same result on all (6) of the DC:

 root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember
 Enter LDAP Password: 
 # extended LDIF
 #
 # LDAPv3
 # base <DC=ad,DC=fvg,DC=lnf,DC=it> with scope subtree
 # filter: (cn=prova123)
 # requesting: rfc822MailMember 
 #
 
 # prova123, Aliases, FVG, ad.fvg.lnf.it
 dn: CN=prova123,CN=Aliases,OU=FVG,DC=ad,DC=fvg,DC=lnf,DC=it
 rfc822MailMember: gaio
 rfc822MailMember: marco.gaiarin
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/DC=DomainDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/DC=ForestDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search result
 search: 2
 result: 0 Success
 
 # numResponses: 5
 # numEntries: 1
 # numReferences: 3

past ONE dc, that does not return nothing:

 root at vdcsv1:~# ldapsearch -H ldap://vdcpp1.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember
 Enter LDAP Password: 
 # extended LDIF
 #
 # LDAPv3
 # base <DC=ad,DC=fvg,DC=lnf,DC=it> with scope subtree
 # filter: (cn=prova123)
 # requesting: rfc822MailMember 
 #
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/CN=Configuration,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/DC=DomainDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search reference
 ref: ldap://ad.fvg.lnf.it/DC=ForestDnsZones,DC=ad,DC=fvg,DC=lnf,DC=it
 
 # search result
 search: 2
 result: 0 Success
 
 # numResponses: 4
 # numReferences: 3


I've checked on that DC with 'samba-tool drs showrepl', and seems all
OK.

What happens? Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list