[Samba] Problem joining domain [SEC=UNCLASSIFIED]

[Rowland penny]

On 12/06/2019 08:36, Thamm, Russell wrote:
> UNCLASSIFIED
>
> Sorry to be a bloody pest, but I've hit a new problem.
>
> I shutdown the 2003 server & seized the roles. I then upgraded to samba 4.7.12. and demoted the 2003 server.
>
> Everything seemed to be working OK for several days, so I upgraded to 4.8.12.
>
> All seems OK except  samba-tool dbcheck gives an error
>
> [root at julius samba-4.8.12]# samba-tool dbcheck -v --cross-ncs ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element'
>    File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 177, in _run
>      return self.run(*args, **kwargs)
>    File "/usr/local/samba/lib64/python2.7/site-packages/samba/netcmd/dbcheck.py", line 142, in run
>      check_expired_tombstones=selftest_check_expired_tombstones)
>    File "/usr/local/samba/lib64/python2.7/site-packages/samba/dbchecker.py", line 200, in __init__
>      self.tombstoneLifetime = int(res[0]["tombstoneLifetime"][0])
>
OK, it seems to be saying that you do not have a 'tombstoneLifetime' 
attribute, try running this on the DC:

ldbsearch --cross-ncs -H ldap://julius -b 'CN=Directory 
Service,CN=Windows 
NT,CN=Services,CN=Configuration,DC=ssunit050,DC=local' -s base -U 
Administrator

It should display the entire AD object, is 'tombstoneLifetime' amongst 
the output ?

Rowland