[Samba] Problems with replication in the Samba 4

[Rowland penny]

On 29/07/2019 14:48, Marcio Demetrio Bacci wrote:
> Yes, but didn't solve.
>
> samba-tool dbcheck
> Checking 2078 objects
> ERROR: missing GUID component for ipsecOwnersReference in object 
> CN=ipsecISAKMPPolicy{7238523D-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,DC=empresa,DC=com,DC=br - 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=empresa,DC=com,DC=br
> unable to find object for DN 
> CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=empresa,DC=com,DC=br - (No such Base 
> DN: CN=ipsecPolicy{7238523C-70FA-11D1-864C-14A300000000},CN=IP 
> Security,CN=System,CN=System,DC=empresa,DC=com,DC=br)
> Not removing dangling forward link
> Please use --fix to fix these errors
> Checked 2078 objects (1 errors)
>
I looked at that several times before I saw the problem, this is from my 
domain:

CN=IP Security,CN=System,DC=samdom,DC=example,DC=com

Can you see your problem now ?

Just in case you cannot, you have:

CN=IP Security,CN=System,CN=System,DC=empresa,DC=com,DC=br

Don't know how that happened and not sure how to fix it, only thing I 
can think of is to use ldbedit and wade through AD and remove one of the 
'CN=System' from wherever there are two. But, as always, back everything 
up first.

Rowland