[Samba] WARNING: no target object found for GUID component link lastKnownParent in deleted object

[Elias Pereira]

hi,

I have this DC in aws to fulfill the authentication need of our moodle.

# samba -V
Version 4.17.7-Debian

DNS with SAMBA_INTERNAL

The replication of the users and groups happens correctly. Some errors in
running samba_dnsupdate, but it is ok anyway.

When I ran the command samba-tool dbcheck, I got the return below.

# samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes
Checking 15765 objects
WARNING: no target object found for GUID component link lastKnownParent in
deleted object CN=NTDS
Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
-
<GUID=650386f2-bc40-45ba-b652-222baa646a96>;CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
Not removing dangling one-way link on deleted object (tombstone garbage
collection in progress?)
WARNING: parent object not found for CN=NTDS
Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
Not moving to LostAndFound (tombstone garbage collection in progress?)
WARNING: no target object found for GUID component link fromServer in
deleted object CN=aba17177-dffd-4834-870c-4311449770b4,CN=NTDS
Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
- <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
Not removing dangling one-way link on deleted object (tombstone garbage
collection in progress?)
WARNING: no target object found for GUID component link fromServer in
deleted object CN=a4ceb105-f308-4e76-84ad-b17b4a3c57c0,CN=NTDS
Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
- <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
Not removing dangling one-way link on deleted object (tombstone garbage
collection in progress?)
WARNING: no target object found for GUID component link lastKnownParent in
deleted object CN=NTDS
Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
-
<GUID=fd9ce42d-697a-43ea-aeb8-c50bc832a2cb>;CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
Not removing dangling one-way link on deleted object (tombstone garbage
collection in progress?)
WARNING: parent object not found for CN=NTDS
Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br

Before the above command I also ran

# samba-tool domain tombstones expunge --tombstone-lifetime=0
Removed 0 objects and 0 links successfully

and as seen, nothing removed.

I tried to remove the entries via ldapmodify, but it was not possible as it
says it has child nodes.

# ldbmodify -H /var/lib/samba/private/sam.ldb delete.ldif
ERR: (Not allowed on non-leaf) "subtree_delete: Unable to delete a non-leaf
node (it has 2 children)!" on DN CN=NTDS
Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
at block before line 3
Modify failed after processing 0 records

Is there any way to check who are the child nodes and remove them? Or is
this not trivial?

Thanks!!!
--
Elias Pereira