[Samba] Active Directory Domain Corruption.

[Zombie Ryushu]

On 6/1/22 06:12, Andrew Bartlett via samba wrote:
> On Wed, 2022-06-01 at 10:57 +0100, Rowland Penny via samba wrote:
>> On Wed, 2022-06-01 at 21:51 +1200, Andrew Bartlett wrote:
>>> On Wed, 2022-06-01 at 10:42 +0100, Rowland Penny via samba wrote:
>>>> That is your decision, but, from my point of view, you are doing
>>>>
>>>> everything wrong:
>>>>
>>>>
>>>>
>>>> You are using an experimental kerberos.
>>>>
>>>> You are running Bind9 in a chroot.
>>>>
>>>> You are running Bind9 with flatfiles.
>>>>
>>>> You have turned off dnsupdate.
>>>>
>>>> You are using a DC as a fileserver.
>>>>
>>>>
>>> Yet to be clear, none of these will be changing the contents of
>>> sam.ldb.
>>>
>>> Andrew Bartlett
>> But the middle three should be.
> That is still not the issue here.  The BIND9 may or may not be working,
> but it doesn't have access to the partition that a simple 'samba-tool
> dbcheck' runs against.  So I think the issues - if there are any real
> issues with the DB - are elsewhere, from where I stand.
>
> Andrew,
>
The dbcheck patch fixed the ability of me to run samba-tool dbcheck, but 
thats all. So my next step is going to be a database purge.