[Samba] Upgrading samba and OS - can I rejoin ?

thom_schu at gmx.de thom_schu at gmx.de
Thu Sep 5 11:43:04 UTC 2019


I installed a new OS and the latest samba 4.10.8 from sernet and (re)joined this server with the same name it had before (samba4-5).
All other samba-server run still with samba 4.8.2 (samba4-1, samba4-2, samba4-3, samba4-4).

When I check the replication on the "new" samba4-5, all entries are with success. But in the section "KCC CONNECTION OBJECTS"
are only 2 servers listed, but according to the sections "INBOUND/OUTBOUND NEIGHBORS", the server has to more than 2 other servers
a connection.

Is this normal ?

>>samba-tool drs kcc


ldb_wrap open of secrets.ldb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Using binding ncacn_ip_tcp:isamba4-5.domain.de[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name isamba4-5.domain.de<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name isamba4-5.domain.de<0x20>
Consistency check on isamba4-51-2.domain.de successful.


>> samba-tool drs showrepl


ldb_wrap open of secrets.ldb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Using binding ncacn_ip_tcp:isamba4-5.domain.de[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name isamba4-5.domain.de<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name isamba4-5.domain.de<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name isamba4-5.domain.de<0x20>
Default-First-Site-Name\ISAMBA4-5
DSA Options: 0x00000001
DSA object GUID: 805aa9d9-e5ae-4d3d-b419-4a8e0ed09a85
DSA invocationId: 42463dc0-c437-4c2a-897b-c7e4dda97b4f

==== INBOUND NEIGHBORS ====

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ Thu Sep  5 12:58:27 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:58:27 2019 CEST

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ Thu Sep  5 12:58:29 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:58:29 2019 CEST

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ Thu Sep  5 12:57:47 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:47 2019 CEST

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ Thu Sep  5 12:57:48 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:48 2019 CEST

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ Thu Sep  5 12:57:47 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:47 2019 CEST

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ Thu Sep  5 12:57:47 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:47 2019 CEST

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ Thu Sep  5 12:57:47 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:47 2019 CEST

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ Thu Sep  5 12:57:47 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:47 2019 CEST

DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ Thu Sep  5 12:57:48 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:48 2019 CEST

DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ Thu Sep  5 12:57:48 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:48 2019 CEST

DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ Thu Sep  5 12:57:51 2019 CEST was successful
                0 consecutive failure(s).
                Last success @ Thu Sep  5 12:57:51 2019 CEST

==== OUTBOUND NEIGHBORS ====

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-4 via RPC
                DSA object GUID: 6a2d5b0d-0d1c-4e3a-a217-4fc0beb4fe86
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=domain
        Default-First-Site-Name\ISAMBA4-4 via RPC
                DSA object GUID: 6a2d5b0d-0d1c-4e3a-a217-4fc0beb4fe86
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=DomainDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-4 via RPC
                DSA object GUID: 6a2d5b0d-0d1c-4e3a-a217-4fc0beb4fe86
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=ForestDnsZones,DC=domain
        Default-First-Site-Name\ISAMBA4-4 via RPC
                DSA object GUID: 6a2d5b0d-0d1c-4e3a-a217-4fc0beb4fe86
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=domain
        Default-First-Site-Name\ISAMBA4-2 via RPC
                DSA object GUID: 5dc32731-e914-486d-96f1-ce065ff956bf
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=domain
        Default-First-Site-Name\ISAMBA4-3 via RPC
                DSA object GUID: 5a6fb1ae-94e8-4227-a0f9-6b600cfcb2c5
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=domain
        Default-First-Site-Name\ISAMBA4-1 via RPC
                DSA object GUID: 24b34ff5-a0e4-4f37-9535-fc08ee1a1992
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

DC=domain
        Default-First-Site-Name\ISAMBA4-4 via RPC
                DSA object GUID: 6a2d5b0d-0d1c-4e3a-a217-4fc0beb4fe86
                Last attempt @ NTTIME(0) was successful
                0 consecutive failure(s).
                Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection --
        Connection name: 49e50866-7a88-49c2-a926-3f9d693e5d61
        Enabled        : TRUE
        Server DNS name : isamba4-1.domain.de
        Server DN name  : CN=NTDS Settings,CN=ISAMBA4-1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!
Connection --
        Connection name: 4542818b-76a9-4485-b5d1-ff733ecd7ea2
        Enabled        : TRUE
        Server DNS name : isamba4-3.domain.de
        Server DN name  : CN=NTDS Settings,CN=ISAMBA4-3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain
                TransportType: RPC
                options: 0x00000001
Warning: No NC replicated for Connection!




More information about the samba mailing list