[Samba] [PATCH] Re: Failing replication
Alexander Harm
alexander.harm at apfel-q.de
Tue Mar 3 09:35:15 UTC 2020
OK, found this post from Louis and this fixed it for me.
https://lists.samba.org/archive/samba/2019-April/222278.html
@Andrew: thanks so much for your time, effort and support the last days!
Alexander
On 3. March 2020 at 10:01:59, Alexander Harm (alexander.harm at apfel-q.de) wrote:
That did the trick for manual replication via
samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --sync-all --local -d 9
However, if I run samba-tool drs showrepl it shows me a
result 1326 (WERR_LOGON_FAILURE)
and also
samba-tool drs replicate dc02 dc01 dc=ds,dc=example,dc=com --full-sync
fails with the same error.
How can I fix this?
On 3. March 2020 at 04:23:02, Andrew Bartlett (abartlet at samba.org) wrote:
I think I have this finally fixed here:
https://gitlab.com/samba-team/samba/-/merge_requests/1189
https://gitlab.com/samba-team/samba/-/merge_requests/1189.patch
Thanks for your patience,
Andrew Bartlett
On Mon, 2020-03-02 at 09:18 +0100, Alexander Harm wrote:
> Hi Andrew,
>
> that is great news. Thanks so much for your support through this.
>
> Alexander
>
>
>
>
> On 2. March 2020 at 09:09:01, Andrew Bartlett (abartlet at samba.org)
> wrote:
>
> > You can just join a new DC and demote the failing one, or the
> > reverse,
> > demote the failing one and rejoin it.
> >
> > However I'm pretty close to a patch and have a test that
> > reproduces
> > this locally, so expect some good news soon.
> >
> > Andrew Bartlett
> >
> > On Sat, 2020-02-29 at 12:27 +0100, Alexander Harm wrote:
> > > Question: is there a possibility to delete the current records of
> > a dc and resync from the master? Like not applying the diff of a
> > replication but just wipe the whole thing and replicate from
> > scratch?
> > >
> > >
> > >
> > >
> > > On 29. February 2020 at 09:23:12, Alexander Harm (
> > alexander.harm at apfel-q.de) wrote:
> > >
> > > > Hi Andrew,
> > > >
> > > > I guess there is a typo in your request. Find attached the
> > output of the following queries:
> > > >
> > > > 1: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub
> > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041' --show-deleted
> > > > 2: ldbsearch -H /var/lib/samba/private/sam.ldb -s sub
> > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304-
> > 83e6-cfcfdae11bc4' --show-deleted
> > > > 3: ldbsearch -H /var/lib/samba/private/sam.ldb -s base -b
> > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-4304-
> > 83e6-cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys' --
> > show-deleted
> > > > Looks like DC01 cannot move the device from registered to
> > deleted, no?
> > > >
> > > > Alexander
> > > >
> > > >
> > > >
> > > >
> > > > On 29. February 2020 at 08:57:01, Andrew Bartlett (
> > abartlet at samba.org) wrote:
> > > >
> > > > > Can you show me the full contents of:
> > > > >
> > > > > 'CN=cfc3ffe7-22b1-4ae3-aef4-4414a3456041\0ADEL:613f15ca-58c0-
> > 4304-83e6-
> > > > > cfcfdae11bc4,CN=Deleted Objects,DC=ds,DC=craze,DC=toys'
> > > > >
> > > > > eg
> > > > >
> > > > > ldbsearch -H sam.ldb -s base -b 'CN=cfc3ffe7-22b1-4ae3-aef4-
> > > > > 4414a3456041\0ADEL:613f15ca-58c0-4304-83e6-
> > cfcfdae11bc4,CN=Deleted
> > > > > Objects,DC=ds,DC=craze,DC=toys' --show-deleted
> > > > >
> > > > > I'm trying to understand what msDS-KeyCredentialLink is set
> > to before
> > > > > we start, as this is where problem starts (I think).
> > > > >
> > > > > Andrew Bartlett
> > > > >
> > > > > On Fri, 2020-02-28 at 23:26 +0100, Alexander Harm wrote:
> > > > > > Hi Andrew,
> > > > > >
> > > > > > attached the three debug outputs.
> > > > > >
> > > > > > dc01: already existing Samba DC which showed the problems
> > > > > > dc03: new Samba DC to see if problems could be worked
> > around by setting up new DCs
> > > > > > your patches are applied to both
> > > > > > The chronological order as follows:
> > > > > >
> > > > > > debug_dc01_repfrom_winad.txt: I get auth errors for some
> > reason when trying to replicate from Windows AD
> > > > > > debug_dc03_repfrom_winad.txt: I then tried to replicate the
> > new DC
> > > > > > debug_dc01_repfrom_dc03.txt: Tried to replicate dc03 to
> > dc01 to work around the auth errors concerning the AD
> > > > > > Does this help you further? Can you confirm that dc03 works
> > in fact fine?
> > > > > >
> > > > > > Alexander
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > On 28. February 2020 at 21:45:04, Andrew Bartlett (
> > abartlet at samba.org) wrote:
> > > > > >
> > > > > > > I attached the patch.
> > > > > > >
> > > > > > > That, and another one (from my own attempts to reproduce
> > by manually
> > > > > > > corrupting the DB), are here:
> > > > > > >
> > > > > > >
> > https://gitlab.com/samba-team/samba/-/merge_requests/1181.patch
> > > > > > >
> > > > > > > Andrew Bartlett
> > > > > > >
> > > > > > > On Fri, 2020-02-28 at 21:39 +0100, Alexander Harm wrote:
> > > > > > > > I am apparently too stupid to just download the
> > diff/patch from gitlab…
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > On 28. February 2020 at 21:37:02, Andrew Bartlett (
> > abartlet at samba.org) wrote:
> > > > > > > >
> > > > > > > > > The new patch on it's own and with the earlier patch
> > (to make it non-
> > > > > > > > > critical) would be helpful. There are multiple errors
> > here and we need
> > > > > > > > > good debugging for both.
> > > > > > > > >
> > > > > > > > > Andrew Bartlett
> > > > > > > > >
> > > > > > > > > On Fri, 2020-02-28 at 21:29 +0100, Alexander Harm
> > wrote:
> > > > > > > > > > Sorry, was a bit confused myself. I will apply your
> > patch and report the result. Just to confirm, we speak about
> > ebd9bee3 (which I already applied) and now 609181e0?
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > On 28. February 2020 at 21:12:01, Andrew Bartlett
> > via samba (samba at lists.samba.org) wrote:
> > > > > > > > > >
> > > > > > > > > > > I'm pretty swamped with other community support
> > issues, which is why it
> > > > > > > > > > > is taking so long to get back to you.
> > > > > > > > > > >
> > > > > > > > > > > It would at least be interesting to see the
> > results after you apply
> > > > > > > > > > > this patch (on master, but might backport
> > cleanly).
> > > > > > > > > > >
> > > > > > > > > > > If it works for you (in terms of giving useful
> > information) I'll
> > > > > > > > > > > propose it for a future Samba version. Still not
> > a fix for the actual
> > > > > > > > > > > issue, but it might tell us what is going on.
> > > > > > > > > > >
> > > > > > > > > > > Thanks,
> > > > > > > > > > >
> > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > >
> > > > > > > > > > > On Mon, 2020-02-24 at 08:29 +0100, Alexander Harm
> > via samba wrote:
> > > > > > > > > > > > Hi Andrew,
> > > > > > > > > > > >
> > > > > > > > > > > > thanks for your feedback. What are my options
> > now? Nuke the whole thing?
> > > > > > > > > > > >
> > > > > > > > > > > > Alexander
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > On 24. February 2020 at 02:08:02, Andrew
> > Bartlett via samba (samba at lists.samba.org) wrote:
> > > > > > > > > > > >
> > > > > > > > > > > > G'Day Alexander,
> > > > > > > > > > > >
> > > > > > > > > > > > This is looking trickier than I had hoped. I
> > don't think the patch I
> > > > > > > > > > > > included is the right approach, and I can't
> > reproduce what I thought
> > > > > > > > > > > > was the issue on master.
> > > > > > > > > > > >
> > > > > > > > > > > > I've added a test in MR
> > > > > > > > > > > >
> > https://gitlab.com/samba-team/samba/-/merge_requests/1128 but that
> > just
> > > > > > > > > > > > shows that what we were doing still works, so
> > it isn't terribly useful
> > > > > > > > > > > > in your case.
> > > > > > > > > > > >
> > > > > > > > > > > > I'm sorry that I don't have a really good next
> > step, something DB-
> > > > > > > > > > > > specific appears to be going on, particularly
> > as you then get another
> > > > > > > > > > > > error once we fix this one.
> > > > > > > > > > > >
> > > > > > > > > > > > Sorry!
> > > > > > > > > > > >
> > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > >
> > > > > > > > > > > > On Sat, 2020-02-08 at 12:29 +1300, Andrew
> > Bartlett via samba wrote:
> > > > > > > > > > > > > Thanks. At this stage is looks like a bug in
> > the repl_meta_data
> > > > > > > > > > > > > module.
> > > > > > > > > > > > >
> > > > > > > > > > > > > Try the attached patch.
> > > > > > > > > > > > >
> > > > > > > > > > > > > Can I name you in the bug and is there any
> > affiliation (eg employer)
> > > > > > > > > > > > > you would like named?
> > > > > > > > > > > > >
> > > > > > > > > > > > > I've filed a bug and will file a merge
> > request once I have a test to
> > > > > > > > > > > > > confirm this.
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > https://bugzilla.samba.org/show_bug.cgi?id=14272
> > > > > > > > > > > > >
> > > > > > > > > > > > > Thanks!
> > > > > > > > > > > > >
> > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > >
> > > > > > > > > > > > > On Fri, 2020-02-07 at 23:34 +0100, Alexander
> > Harm via samba wrote:
> > > > > > > > > > > > > > Hi,
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > as instructed I upgraded to “Version
> > 4.11.6-Debian”.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Attached the new debug file.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Regards, Alexander
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > On 7. February 2020 at 10:01:02, Andrew
> > Bartlett via samba (
> > > > > > > > > > > > > > samba at lists.samba.org) wrote:
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > I would fix that first, please run Samba
> > 4.11.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > We have done much on replication since then
> > and I'm keen to rule
> > > > > > > > > > > > > > out
> > > > > > > > > > > > > > things we have already fixed before digging
> > into this further.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Thanks!
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:55 +0100,
> > Alexander Harm via samba
> > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > Version 4.9.5-Debian
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > On 7. February 2020 at 09:55:02, Andrew
> > Bartlett via samba (
> > > > > > > > > > > > > > > samba at lists.samba.org) wrote:
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > Much better. What Samba version is this?
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:44 +0100,
> > Alexander Harm via samba
> > > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > > Is this better?
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > On 7. February 2020 at 09:42:01, Andrew
> > Bartlett via samba (
> > > > > > > > > > > > > > > > samba at lists.samba.org) wrote:
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > I mean the final columns, not lines.
> > There are long lines that
> > > > > > > > > > > > > > > > seem to
> > > > > > > > > > > > > > > > be cut off mid-word, rather than
> > wrapped.
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 09:14 +0100,
> > Alexander Harm via samba
> > > > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > > > I did but these are the last lines.
> > It ends with “raise e”
> > > > > > > > > > > > > > > > > also in the shell.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > I also ran it on the other DCs and
> > they all end with “raise
> > > > > > > > > > > > > > > > > e”.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Alexander
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > On 7. February 2020 at 09:12:02,
> > Andrew Bartlett (
> > > > > > > > > > > > > > > > > abartlet at samba.org) wrote:
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > G'Day Alexander,
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > It looks like you have copied the
> > logs out of a terminal and
> > > > > > > > > > > > > > > > > lost the
> > > > > > > > > > > > > > > > > ends of the lines. Those have the
> > critical (groan...) details
> > > > > > > > > > > > > > > > > of what
> > > > > > > > > > > > > > > > > went wrong with the apparent
> > 'critical extension' failure.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Can you try and get those and I'll
> > look at them tomorrow.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Thanks!
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > On Fri, 2020-02-07 at 08:56 +0100,
> > Alexander Harm via samba
> > > > > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > > > > Hi Andrew,
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > thanks for your reply. Find
> > attached the output of the
> > > > > > > > > > > > > > > > > > command. Looks like it fails on
> > renaming an object to me.
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > Regards, Alexander
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > On 7. February 2020 at 08:50:02,
> > Andrew Bartlett via samba
> > > > > > > > > > > > > > > > > > (samba at lists.samba.org) wrote:
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > On Wed, 2020-02-05 at 23:41 +0100,
> > Alexander Harm via samba
> > > > > > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > > > > > Hello,
> > > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > > we could need some help resolving
> > a replication issue we
> > > > > > > > > > > > > > > > > > > experience since one week.
> > > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > > Running samba-tool drs replicate
> > ka-h9-dc02 VMDC-AZURE-01
> > > > > > > > > > > > > > > > > > > dc=ds,dc=example,dc=com --sync-
> > all -d 9 returns
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > Do that again with --local and we
> > should get a better set
> > > > > > > > > > > > > > > > > > of info in
> > > > > > > > > > > > > > > > > > the logs.
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > > > Andrew Bartlett
> > http://samba.org/~abartlet/
> > > > > > > > > > > > > > > > > > Authentication Developer, Samba
> > Team http://samba.org
> > > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT
> > > > > > > > > > > > > > > > > >
> > http://catalyst.net.nz/services/samba
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > > Andrew Bartlett
> > http://samba.org/~abartlet/
> > > > > > > > > > > > > > > > > Authentication Developer, Samba Team
> > http://samba.org
> > > > > > > > > > > > > > > > > Samba Developer, Catalyst IT
> > > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba
> >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > Andrew Bartlett
> > http://samba.org/~abartlet/
> > > > > > > > > > > > > > > > Authentication Developer, Samba Team
> > http://samba.org
> > > > > > > > > > > > > > > > Samba Developer, Catalyst IT
> > > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > To unsubscribe from this list go to the
> > following URL and read
> > > > > > > > > > > > > > > > the
> > > > > > > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > Andrew Bartlett
> > http://samba.org/~abartlet/
> > > > > > > > > > > > > > > Authentication Developer, Samba Team
> > http://samba.org
> > > > > > > > > > > > > > > Samba Developer, Catalyst IT
> > > > > > > > > > > > > > > http://catalyst.net.nz/services/samba
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > To unsubscribe from this list go to the
> > following URL and read
> > > > > > > > > > > > > > > the
> > > > > > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/
> >
> > > > > > > > > > > > > > Authentication Developer, Samba Team
> > http://samba.org
> > > > > > > > > > > > > > Samba Developer, Catalyst IT
> > http://catalyst.net.nz/services/samba
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > To unsubscribe from this list go to the
> > following URL and read
> > > > > > > > > > > > > > the
> > > > > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > --
> > > > > > > > > > > > Andrew Bartlett
> > > > > > > > > > > > https://samba.org/~abartlet/
> > > > > > > > > > > > Authentication Developer, Samba Team
> > https://samba.org
> > > > > > > > > > > > Samba Development and Support, Catalyst IT -
> > Expert Open Source
> > > > > > > > > > > > Solutions
> > > > > > > > > > > > https://catalyst.net.nz/services/samba
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > To unsubscribe from this list go to the
> > following URL and read the
> > > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > --
> > > > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/
> > > > > > > > > > > Authentication Developer, Samba Team
> > http://samba.org
> > > > > > > > > > > Samba Developer, Catalyst IT
> > http://catalyst.net.nz/services/samba
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > To unsubscribe from this list go to the following
> > URL and read the
> > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > --
> > > > > > > > > Andrew Bartlett http://samba.org/~abartlet/
> > > > > > > > > Authentication Developer, Samba Team http://samba.org
> >
> > > > > > > > > Samba Developer, Catalyst IT
> > http://catalyst.net.nz/services/samba
> > > > > > > > >
> > > > > > > > >
> > > > > > > --
> > > > > > > Andrew Bartlett http://samba.org/~abartlet/
> > > > > > > Authentication Developer, Samba Team http://samba.org
> > > > > > > Samba Developer, Catalyst IT
> > http://catalyst.net.nz/services/samba
> > > > > > >
> > > > > --
> > > > > Andrew Bartlett http://samba.org/~abartlet/
> > > > > Authentication Developer, Samba Team http://samba.org
> > > > > Samba Developer, Catalyst IT
> > http://catalyst.net.nz/services/samba
> > > > >
> > > > >
> > --
> > Andrew Bartlett http://samba.org/~abartlet/
> > Authentication Developer, Samba Team http://samba.org
> > Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
> >
> >
--
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team https://samba.org
Samba Development and Support, Catalyst IT - Expert Open Source
Solutions
https://catalyst.net.nz/services/samba
More information about the samba
mailing list