[Samba] Problem with secondary DC

[James B. Byrne]

On Thu, August 20, 2020 16:14, Rowland penny wrote:
> On 20/08/2020 20:40, James B. Byrne via samba wrote:
>> FreeBSd-12.1p8
>> Samba-4.10.15
>>
>>
>> I have this problem:
>>
>> samba-tool dbcheck --cross-ncs
>> Searching for dsServiceName in rootDSE failed: operations error at
>> ../../source4/dsdb/samdb/ldb_modules/rootdse.c:518
>> Failed to find our own NTDS Settings DN in the ldb!
>> Searching for dsServiceName in rootDSE failed: operations error at
>> ../../source4/dsdb/samdb/ldb_modules/rootdse.c:518
>> Failed to find our own NTDS Settings DN in the ldb!
>>
>> How do I fix this?
>>
>>
>>
> Is this just on one DC ?
>
> If you run the same command on another DC does it complete without error ?
>


I have two (2) DCs, SMB4-1 and SMB4-2, and two (2) user workstations connected
to the domain.  SMB4-2 has all the FSMO roles.

[root at smb4-2 ~ (master)]# samba-tool dbcheck --cross-ncs
Checking 3542 objects
Checked 3542 objects (0 errors)


[root at smb4-1 ~ (master)]# samba-tool dbcheck --cross-ncs
Searching for dsServiceName in rootDSE failed: operations error at
../../source4/dsdb/samdb/ldb_modules/rootdse.c:518
Failed to find our own NTDS Settings DN in the ldb!
Searching for dsServiceName in rootDSE failed: operations error at
../../source4/dsdb/samdb/ldb_modules/rootdse.c:518
Failed to find our own NTDS Settings DN in the ldb!
ERROR(ldb): uncaught exception - operations error at
../../source4/dsdb/samdb/ldb_modules/rootdse.c:518
  File "/usr/local/lib/python3.7/site-packages/samba/netcmd/__init__.py", line
185, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/lib/python3.7/site-packages/samba/netcmd/dbcheck.py", line
141, in run
    check_expired_tombstones=selftest_check_expired_tombstones)
  File "/usr/local/lib/python3.7/site-packages/samba/dbchecker.py", line 119,
in __init__
    self.ntds_dsa = ldb.Dn(samdb, samdb.get_dsServiceName())
  File "/usr/local/lib/python3.7/site-packages/samba/samdb.py", line 1055, in
get_dsServiceName
    res = self.search(base="", scope=ldb.SCOPE_BASE, attrs=["dsServiceName"])




-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3