[Samba] demoted AD remains in samba-tool drs showrepl

Benedikt Kaleß benedikt.kaless at forumZFD.de
Wed Apr 29 08:21:31 UTC 2020


Dear list,
in this corona crisis a delivery of a AD to a location abroad takes
longer than I expected. I demoted the AD which is in delivery with

samba-tool domain demote --remove-other-dead-server=ADDC3

If I know trigger a

samba-tool drs showrepl 

I still see him in the list:

CN=Configuration,DC=example,DC=com
    NTDS DN: CN=NTDS
Settings\0ADEL:490b60eb-3616-4f02-87c2-32b6653bfa22,CN=ADDC3\0ADEL:d424f125-bca9-4d37-907b-4b83b5558197,CN=Servers,CN=location,CN=Sites,CN=Configuration,DC=example,DC=cm
        DSA object GUID: 490b60eb-3616-4f02-87c2-32b6653bfa22
        Last attempt @ Wed Apr 22 09:29:19 2020 CEST failed, result 2
(WERR_FILE_NOT_FOUND)
        44689 consecutive failure(s).
         Last success @ NTTIME(0)

A samba-tool dbcheck list this entry as well:

Not fixing old string component
NOTE: old (due to rename or delete) DN string component for
lastKnownParent in object CN=RID
Set\0ADEL:e1e17d3e-92ac-4f33-98ce-635edabf6166,CN=Deleted
Objects,DC=zfd,DC=forumzfd,DC=de - CN=ADDC3,OU=Domain
Controllers,DC=example,DC=com

I don't see that server in "Active Directory Locations" tool any more.

How can I get rid of these entries in the ldap database?

Best regards
Benedikt

-- 
forumZFD
Entschieden für Frieden|Committed to Peace

Benedikt Kaleß
Leiter Team IT|Head team IT

Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service
Am Kölner Brett 8 | 50825 Köln | Germany  

Tel 0221 91273233 | Fax 0221 91273299 | 
http://www.forumZFD.de 

Vorstand nach § 26 BGB, einzelvertretungsberechtigt|Executive Board:
Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz  
VR 17651 Amtsgericht Köln

Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX



More information about the samba mailing list