[Samba] Different LDAP query in different DC...

[Marco Gaiarin]

> past ONE dc, that does not return nothing:

Ok, supposing a xID/ACL trouble, this morning i've copied the
'idmap.ldb' from the DC with FSMO roles to the mulfunctioning DC, but
still i get empty answer from the mulfunctioning DC.

I've done a 'ldap compare' and all seems in sync:

 root at vdcsv1:~# samba-tool ldapcmp ldap://vdcsv1.ad.fvg.lnf.it ldap://vdcpp1.ad.fvg.lnf.it -U gaio
 Password for [LNFFVG\gaio]:
 
 * Comparing [DOMAIN] context...
 
 * Objects to be compared: 1312
 
 * Result for [DOMAIN]: SUCCESS
 
 * Comparing [CONFIGURATION] context...
 
 * Objects to be compared: 1673
 
 * Result for [CONFIGURATION]: SUCCESS
 
 * Comparing [SCHEMA] context...
 
 * Objects to be compared: 1556
 
 * Result for [SCHEMA]: SUCCESS
 
 * Comparing [DNSDOMAIN] context...
 
 * Objects to be compared: 310
 
 * Result for [DNSDOMAIN]: SUCCESS
 
 * Comparing [DNSFOREST] context...
 
 * Objects to be compared: 41
 
 * Result for [DNSFOREST]: SUCCESS

Why?!

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)