[Samba] synchronization problem between DC

Marcio Demetrio Bacci marciobacci at gmail.com
Tue Aug 6 03:06:09 UTC 2019


Hi,

When I replace the DC Windows by Samba 4 DC the problem will definitely be
solved?

Regards,

Márcio Bacci

Em seg, 5 de ago de 2019 às 16:31, Marcio Demetrio Bacci <
marciobacci at gmail.com> escreveu:

> Hi,
>
> Messages Checked in Windows Server 2008 Event Log:
>
> Description:
> Computer session configuration 'COMP010' failed because the security
> database does not contain a trust account 'COMP010$' referenced by the
> specified computer.
>
> USER ACTION
> If this is the first occurrence of this event for the specified computer
> and account, it may be a transient issue that requires no action at this
> time. Otherwise, the following steps can be performed to resolve the issue:
>
> If 'COMP010 $' is a legitimate computer account for computer 'COMP010',
> 'COMP010' must rejoin the domain.
>
> If 'COMP010 $' is a legitimate cross-domain trust account, the trust must
> be re-created.
>
> Otherwise, assuming that 'COMP010$' is not a legitimate account, the
> following action should be taken against 'COMP010':
>
> If 'COMP010' is a domain controller, the reliability associated with
> 'COMP010$' must be excluded.
>
> If 'COMP010' is not a domain controller, it must be removed from the
> domain.
>
>
> Description:
> Authentication of the COMP010 computer session configuration failed. Error:
> Access denied.
>
> Regards,
>
> Márcio Bacci
>
> Em seg, 5 de ago de 2019 às 14:10, Marcio Demetrio Bacci <
> marciobacci at gmail.com> escreveu:
>
>> Hi,
>>
>> I have noticed that there are problems synchronizing between DC Primary
>> Samba 4 and DC Secondary Windows Server 2008. I have already fixed the
>> issue with the ldbedit command and everything was fine. Over time
>> inconsistencies occur between the DCs again, as shown below:
>>
>> samba-tool ldapcmp ldap://WIN-DC1 ldap://SAMBA4-DC -UAdministrator
>> Password for [EMPRESA\Administrator]:
>>
>> Comparing:
>> 'CN=joao,CN=Users,DC=empresa,DC=com,DC=br' [ldap://WIN-DC1]
>> 'CN=joao,CN=Users,DC=empresa,DC=com,DC=br' [ldap://SAMBA4-DC]
>>     Difference in attribute values:
>>         lastLogonTimestamp =>
>> ['132085404533315712']
>> ['132094843457427790']
>>     FAILED
>>
>> Comparing:
>> 'CN=jose,CN=Users,DC=empresa,DC=com,DC=br' [ldap://WIN-DC1]
>> 'CN=jose,CN=Users,DC=empresa,DC=com,DC=br' [ldap://SAMBA4-DC]
>>     Difference in attribute values:
>>         lastLogonTimestamp =>
>> ['132085555683152615']
>> ['132094821763074670']
>>     FAILED
>>
>>
>> Comparing:
>> 'DC=COMP101,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
>> [ldap://WIN-DC1]
>> 'DC=COMP101,DC=empresa.com.br,CN=MicrosoftDNS,DC=DomainDnsZones,DC=empresa,DC=com,DC=br'
>> [ldap://SAMBA4-DC]
>>     Difference in attribute values:
>>         dnsRecord =>
>>
>> ['\x04\x00\x01\x00\x05\xf0\x00\x00\xdd\x05Yx\x00\x00\x00<\x00\x00\x00\x005\xfd7\x00\xac\x15\xa0\x01']
>>
>> ['\x04\x00\x01\x00\x05\xf0\x00\x00\xdb\x05Yx\x00\x00\x00<\x00\x00\x00\x005\xfd7\x00\xac\x15\xa0\x01']
>>     FAILED
>>
>> * Result for [DNSDOMAIN]: FAILURE
>>
>> Does this problem occur because of the Windows Server 2008 server?
>>
>> Would anyone know why this loss of synchronization occurs?
>>
>> Regards,
>>
>> Márcio Bacci
>>
>


More information about the samba mailing list