[Samba] ldapcmp failed after windows server 2012 AD joined

[Rowland Penny]

On Fri, 2022-03-25 at 17:57 +0800, Adam Xu via samba wrote:
> Hi samba list,
> 
> I joined  a windows server 2012 R2 to My samba AD recently.
> 
> now I have 4 DCs：
> 
> DC1: samba ad  ver:4.15.6
> 
> DC2: samba ad  ver:4.15.6
> 
> DC3: samba RODC  ver:4.15.6
> 
> DC4: windows server 2012 R2 ad
> 
> when I run:
> 
> samba-tool ldapcmp ldap://DC1 ldap://DC4 -Uadministrator
> 
> here's the result:
> 
> * Comparing [CONFIGURATION] context...
> 
> * Objects to be compared: 1791
> 
> Comparing:
> 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC1]
> 'CN=CONFIGURATION,DC=NTBAOBEI,DC=COM' [ldap://DC4]
>      Difference in attribute values:
>          instanceType =>
> [b'13']
> [b'5']
> 
>      FAILED

The 'instanceType' attribute can be different, so you do not have a
problem. You can filter out attributes like this, see 'samba-tool
ldapcmp --help' for more information.

Rowland