[Samba] Replication only working one way

[Rowland penny]

On 14/07/2020 18:37, Peter Pollock via samba wrote:
>    OK, tried that. Kicked myself for not trying earlier... but it didn't
> work.
>
> In fact, the error has got worse.
>
> Now when I try to go from Genesis to Luke I get:
>
>   sudo samba-tool drs replicate luke genesis DC=kcs,DC=local -Udomainadmin
> .
> .
> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
> drsException: DsReplicaSync failed (1359, 'WERR_INTERNAL_ERROR')
>    File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 386, in
> run
>      drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
> source_dsa_guid, NC, req_options)
>    File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 85, in
> sendDsReplicaSync
>      raise drsException("DsReplicaSync failed %s" % estr)
>
> and when I go the other way I get a different error:
>
>   sudo samba-tool drs replicate genesis luke DC=kcs,DC=local -Udomainadmin
> .
> .
> ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed -
> drsException: DsReplicaSync failed (8453, 'WERR_DS_DRA_ACCESS_DENIED')
>    File "/usr/lib/python2.7/dist-packages/samba/netcmd/drs.py", line 386, in
> run
>      drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
> source_dsa_guid, NC, req_options)
>    File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 85, in
> sendDsReplicaSync
>      raise drsException("DsReplicaSync failed %s" % estr)
>
>
OK, try checking the databases against each other, you can do this with 
samba-tool:

samba-tool ldapcmp ldap://DC1 ldap://DC2

Replace DC1 & DC2 with the hostnames of the DC's

Rowland