[Samba] Replication failures

[M B]

I’m getting errors with replication

Samba 4.9.3 on Ubuntu 16.04
6 Samba DC’s at 3 sites

I recently joined a Win2k8 R2 server to the domain and promoted it to domain controller. The replication was working before that, and not working after.

I didn’t realize the problems and tried to join a Win2012 R2 server and promote to DC as well. That also failed with an error about replication failures.


sudo samba-tool drs showrepl -d9
output from “showrepl”

===

clipped
.
.
.
GSSAPI Connection will be cryptographically signed
    drsuapi_DsReplicaGetInfo: struct drsuapi_DsReplicaGetInfo
       in: struct drsuapi_DsReplicaGetInfo
           bind_handle              : *
               bind_handle: struct policy_handle
                   handle_type              : 0x00000000 (0)
                   uuid                     : cffaee4f-9caa-4e72-a89d-1d50df9dfa67
           level                    : DRSUAPI_DS_REPLICA_GET_INFO (1)
           req                      : *
               req                      : union drsuapi_DsReplicaGetInfoRequest(case 1)
               req1: struct drsuapi_DsReplicaGetInfoRequest1
                   info_type                : DRSUAPI_DS_REPLICA_INFO_NEIGHBORS (0)
                   object_dn                : NULL
                   source_dsa_guid          : 00000000-0000-0000-0000-000000000000
rpc fault: DCERPC_FAULT_CANT_PERFORM
ERROR(runtime): DsReplicaGetInfo of type 0 failed - (3221356597, 'The operation cannot be performed.')
 File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 175, in get_neighbours
   self.drsuapi_handle, 1, req1)

===



output from “ samba-tool drs replicate dc2 dc1 OU=Users,OU=Company,DC=my,DC=company,DC=com -d9"

===
clipped
.
.
.
    drsuapi_DsReplicaSync: struct drsuapi_DsReplicaSync
       out: struct drsuapi_DsReplicaSync
           result                   : WERR_DS_DRA_BAD_NC
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (8440, 'WERR_DS_DRA_BAD_NC')
 File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 568, in run
   drs_utils.sendDsReplicaSync(server_bind, server_bind_handle, source_dsa_guid, NC, req_options)
 File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 88, in sendDsReplicaSync
   raise drsException("DsReplicaSync failed %s" % estr)
ubuntu at dc1:~$ sudo
===