[Samba] ldapcmp failed after windows server 2012 AD joined

[Adam Xu]

Hi samba list,

I joined  a windows server 2012 R2 to My samba AD recently.

now I have 4 DCs：

DC1: samba ad  ver:4.15.6

DC2: samba ad  ver:4.15.6

DC3: samba RODC  ver:4.15.6

DC4: windows server 2012 R2 ad

when I run:

samba-tool ldapcmp ldap://DC1 ldap://DC4 -Uadministrator

here's the result:

* Comparing [CONFIGURATION] context...

* Objects to be compared: 1791

Comparing:
'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1]
'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4]
     Difference in attribute values:
         instanceType =>
[b'13']
[b'5']

     FAILED

* Result for [CONFIGURATION]: FAILURE

SUMMARY
---------

Attributes with different values:

     instanceType

* Comparing [SCHEMA] context...

* Objects to be compared: 1739

Comparing:
'CN=SCHEMA,CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1]
'CN=SCHEMA,CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4]
     Difference in attribute values:
         instanceType =>
[b'13']
[b'5']

     FAILED

* Result for [SCHEMA]: FAILURE

SUMMARY
---------

Attributes with different values:

     instanceType

* Comparing [DNSDOMAIN] context...

* Objects to be compared: 103

* Result for [DNSDOMAIN]: SUCCESS

* Comparing [DNSFOREST] context...

* Objects to be compared: 24

* Result for [DNSFOREST]: SUCCESS
ERROR: Compare failed: -1

and when I run samba-tool dbcheck --cross-ncs --fix

the error remains.