[Samba] Failing replication

[Alexander Harm]

Just guessing:

could this be related to the activated “AD recycle bin” feature?

could this be related to activated Microsoft Azure Active Directory Connect?

The object causing the problem is in the “Deleted Objects” folder of the AD. It is put there by the recycle bin feature. However, I guess that even if I manage to somehow delete it from there on the master AD, the object will never really be gone because due to the replication it will be kept until replicated or not?

If the recycle bin is the culprit, how could one fix this? Remove all Samba ADs, fix the Windows AD (how?) and rejoin Samba ADs?

Regards, Alexander




On 7. February 2020 at 23:34:13, Alexander Harm (alexander.harm at apfel-q.de) wrote:

Hi,

as instructed I upgraded to “Version 4.11.6-Debian”.

Attached the new debug file.

Regards, Alexander




On 7. February 2020 at 10:01:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote:

I would fix that first, please run Samba 4.11.

We have done much on replication since then and I'm keen to rule out
things we have already fixed before digging into this further.

Thanks!

Andrew Bartlett

On Fri, 2020-02-07 at 09:55 +0100, Alexander Harm via samba wrote:
> Version 4.9.5-Debian
>
>
>
>
> On 7. February 2020 at 09:55:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote:
>
> Much better. What Samba version is this?
>
> Andrew Bartlett
>
> On Fri, 2020-02-07 at 09:44 +0100, Alexander Harm via samba wrote:
> > Is this better?
> >
> >
> >
> >
> > On 7. February 2020 at 09:42:01, Andrew Bartlett via samba (samba at lists.samba.org) wrote:
> >
> > I mean the final columns, not lines. There are long lines that seem to
> > be cut off mid-word, rather than wrapped.
> >
> > Andrew Bartlett
> >
> > On Fri, 2020-02-07 at 09:14 +0100, Alexander Harm via samba wrote:
> > > I did but these are the last lines. It ends with “raise e” also in the shell.
> > >
> > > I also ran it on the other DCs and they all end with “raise e”.
> > >
> > > Alexander
> > >
> > >
> > >
> > >
> > > On 7. February 2020 at 09:12:02, Andrew Bartlett (abartlet at samba.org) wrote:
> > >
> > > G'Day Alexander,
> > >
> > > It looks like you have copied the logs out of a terminal and lost the
> > > ends of the lines. Those have the critical (groan...) details of what
> > > went wrong with the apparent 'critical extension' failure.
> > >
> > > Can you try and get those and I'll look at them tomorrow.
> > >
> > > Thanks!
> > >
> > > Andrew Bartlett
> > >
> > > On Fri, 2020-02-07 at 08:56 +0100, Alexander Harm via samba wrote:
> > > > Hi Andrew,
> > > >
> > > > thanks for your reply. Find attached the output of the command. Looks like it fails on renaming an object to me.
> > > >
> > > > Regards, Alexander
> > > >
> > > >
> > > >
> > > >
> > > > On 7. February 2020 at 08:50:02, Andrew Bartlett via samba (samba at lists.samba.org) wrote:
> > > >
> > > > On Wed, 2020-02-05 at 23:41 +0100, Alexander Harm via samba wrote:
> > > > > Hello,
> > > > >
> > > > > we could need some help resolving a replication issue we experience since one week.
> > > > >
> > > > > Running samba-tool drs replicate ka-h9-dc02 VMDC-AZURE-01 dc=ds,dc=example,dc=com --sync-all -d 9 returns
> > > >
> > > > Do that again with --local and we should get a better set of info in
> > > > the logs.
> > > >
> > > > Andrew Bartlett
> > > > --
> > > > Andrew Bartlett http://samba.org/~abartlet/
> > > > Authentication Developer, Samba Team http://samba.org
> > > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
> > > >
> > > >
> > > >
> > > --
> > > Andrew Bartlett http://samba.org/~abartlet/
> > > Authentication Developer, Samba Team http://samba.org
> > > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
> > >
> > >
> > --
> > Andrew Bartlett http://samba.org/~abartlet/
> > Authentication Developer, Samba Team http://samba.org
> > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> --
> Andrew Bartlett http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
> Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba