[Samba] How to fully remove entries to dead windows server

[Rowland penny]

On 16/07/2020 08:45, Peter Pollock via samba wrote:
> My question though is what steps should I take to ensure that I completely
> remove all entries to the dead windows server? I wasn't able to demote it
> before it died and I don't want loose ends causing niggly problems in the
> future.

We have a command for that ;-)

samba-tool domain demote --remove-other-dead-server=DEAD_DC_TO_REMOVE

>
> Many thanks, Peter
>
> P.S. Why does it say it failed replication, while also saying the last
> success was exactly the same time as the last failure?
>
> CN=Schema,CN=Configuration,DC=my,DC=domain
>          Default-First-Site-Name\DC2 via RPC
>                  DSA object GUID: d0ab7757-99e0-4104-a22d-60e4b318e1b4
>                  Last attempt @ Thu Jul 16 00:35:58 2020 PDT failed, result
> 8453 (WERR_DS_DRA_ACCESS_DENIED)
>                  249708 consecutive failure(s).
>                  Last success @ Thu Jul 16 00:35:58 2020 PDT

I have no idea, unless it is trying to replicate to the dead DC ?

Rowland