[Samba] Problem with samba-tool --reindex

[me at tdiehl.org]

On Fri, 23 Oct 2020, Rowland penny via samba wrote:

> On 23/10/2020 15:03, Tom Diehl via samba wrote:
>>  Hi,
>>
>>  I have 2 DC's. One is running 4.10.18 and the other is running 4.11.14.
>>  I am planning on upgrading the 4.10.18 DC to 4.11.14 and then both up to
>>  4.12r.latest.
>>
>>  In doing this I ran samba-tool dbcheck --reindex and got the following
>>  warning:
>>
>>  (vdc1 pts8) # samba-tool dbcheck --reindex
>>  Re-indexing...
>>  ../../lib/ldb/ldb_key_value/ldb_kv_index.c:2413: duplicate attribute value
>>  in CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com for index on
>>  servicePrincipalName, duplicate of objectGUID
>>  bd1c4b7c-c573-444c-951e-ff932612a111 in
>>  @INDEX:SERVICEPRINCIPALNAME:TERMSRV/SHOPOFFICE-20.KMG.MYDOMAIN.COM
>>  completed re-index OK
>>  (vdc1 pts8)
>>
>>  Does anyone know how to fix this?
>>
>>  Regards,
>> 
> First 'warning' != 'error', the 'completed re-index OK' shows this.

Right I get that but I would like to clean it up if I can.

>
> It is possible that you have a duplicate SPN.

I am not sure. If I do:
(vdc1 pts9) # samba-tool spn list SHOPOFFICE-20$
shopoffice-20$
User CN=SHOPOFFICE-20,CN=Computers,DC=kmg,DC=mydomain,DC=com has the following servicePrincipalName:
          HOST/ShopOffice-20.kmg.mydomain.com
          RestrictedKrbHost/ShopOffice-20.kmg.mydomain.com
          HOST/SHOPOFFICE-20
          RestrictedKrbHost/SHOPOFFICE-20
          TERMSRV/ShopOffice-20.kmg.mydomain.com
          TERMSRV/SHOPOFFICE-20
          TERMSRV/SHOPOFFICE-20.kmg.mydomain.com
(vdc1 pts9) #

The above is what I get.  Is this the correct way check or is there
something else I should be looking at?

I see the TERMSRV/SHOPOFFICE-20.kmg.mydomain.com is listed twice.
Is this the problem? If yes what is the correct way to fix this?

Regards,

-- 
Tom			me at tdiehl.org