[Samba] changes on DC not replicated, while showrepl reports no issues

[Rowland penny]

On 17/11/2020 11:54, mj via samba wrote:
> Hi,
>
> Checking a bit more today, as the two changes on DC4 have *still* not 
> propagated  to DC2/DC3, I discovered the
>  samba-tool drs uptodateness
> command.
>
> I gives the following output, not sure what "unknown invocation ID" 
> means. I hope someone here is able to explain..?
>
> It's output:
>
>> root at dc2:~# samba-tool drs uptodateness
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> Unknown invocation ID 556b2cb4-e576-48e2-bb7c-7f62caee84fc
>> Unknown invocation ID 7281ff0f-5af2-4ded-bdaf-362f1545d221
>> Unknown invocation ID 82b24c02-16cb-4ed1-b68b-a047c26886a9
>> Unknown invocation ID b97cc603-6d03-4ad0-8629-be408fed8d69
>> Unknown invocation ID e50c4440-f3d2-429e-a19d-c11bc72f5565
>> DOMAIN          maximum: 1  median: 0.0  failure: 0
>> CONFIGURATION   maximum: 1  median: 1.0  failure: 0
>> SCHEMA          maximum: 1  median: 1.0  failure: 0
>> DNSDOMAIN       maximum: 1  median: 1.0  failure: 0
>> DNSFOREST       maximum: 1  median: 1.0  failure: 0
>
> Any idea what this means?
>
> On DC3, it lists the same Unknown invocation ID, but ends differently:
>> DOMAIN          maximum: 0  median: 0.0 failure: 0
>> CONFIGURATION   maximum: 0  median: 0.0  failure: 0
>> SCHEMA          maximum: 0  median: 0.0  failure: 0
>> DNSDOMAIN       maximum: 0  median: 0.0  failure: 0
>> DNSFOREST       maximum: 0  median: 0.0  failure: 0
>
> Output on DC4 (the one where we made the change yesterday) looks like 
> DC3 above.
>
> Not sure what this means.
>
> And worried that this samba-tool drs showrepl still shows nothing 
> wrong at all, though there clearly IS an issue.
>
> Warning to everyone: use the samba-tool ldapcmp command to verify LDAP 
> contents between your DCs! Don't just trust your showrepl output..!
>
> MJ
>
Try reading this:

http://www.frickelsoft.net/blog/?p=148

Rowland