[Samba] Samba 4.7.9 dbcheck error

[Rowland Penny]

On Wed, 26 Sep 2018 15:28:42 +0200
Daniel Jordan <d.jordan at gfd.de> wrote:

> 
> dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb 
> '(objectClass=domain)' objectSid
> # record 1
> dn: DC=xx,DC=xx,DC=xx
> objectSid: S-1-5-21-3258148492-1502286889-3538134041
> 
> 
> 
> dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb 
> '(&(objectClass=rIDSet)(cn=RID Set))' rIDAllocationPool
> # record 1
> dn: CN=RID Set,CN=DC01,OU=Domain Controllers,DC=xx,DC=xx,DC=xx
> rIDAllocationPool: 2100-2599
> 
> # record 2
> dn: CN=RID Set,CN=DC02,OU=Domain Controllers,DC=xx,DC=xx,DC=xx
> rIDAllocationPool: 1600-2099

Strange, you originally posted this SID-RID:

SID S-1-5-21-3258148492-1502286889-3538134041-1601

For: CN=FS01,OU=Server,DC=xx,DC=xx,DC=xx

The error message said :

conflicts with our current RID set in
CN=RID Set,CN=DC01,OU=Domain Controllers,DC=xx,DC=xx,DC=xx

Which is '2100-2599', so it does conflict, but it matches '1600-2099'
from CN=DC02

Do you have two DC's ?
Have you tried transferring the FSMO roles to DC02 ?

Rowland