[Samba] WARNING: no target object found for GUID component link lastKnownParent in deleted object

[Elias Pereira]

hi,

Any clue?

On Mon, Apr 3, 2023 at 10:17 AM Elias Pereira <empbilly at gmail.com> wrote:

> hi,
>
> I have this DC in aws to fulfill the authentication need of our moodle.
>
> # samba -V
> Version 4.17.7-Debian
>
> DNS with SAMBA_INTERNAL
>
> The replication of the users and groups happens correctly. Some errors in
> running samba_dnsupdate, but it is ok anyway.
>
> When I ran the command samba-tool dbcheck, I got the return below.
>
> # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes
> Checking 15765 objects
> WARNING: no target object found for GUID component link lastKnownParent in
> deleted object CN=NTDS
> Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> -
> <GUID=650386f2-bc40-45ba-b652-222baa646a96>;CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> Not removing dangling one-way link on deleted object (tombstone garbage
> collection in progress?)
> WARNING: parent object not found for CN=NTDS
> Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> Not moving to LostAndFound (tombstone garbage collection in progress?)
> WARNING: no target object found for GUID component link fromServer in
> deleted object CN=aba17177-dffd-4834-870c-4311449770b4,CN=NTDS
> Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> - <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
> Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> Not removing dangling one-way link on deleted object (tombstone garbage
> collection in progress?)
> WARNING: no target object found for GUID component link fromServer in
> deleted object CN=a4ceb105-f308-4e76-84ad-b17b4a3c57c0,CN=NTDS
> Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> - <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
> Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> Not removing dangling one-way link on deleted object (tombstone garbage
> collection in progress?)
> WARNING: no target object found for GUID component link lastKnownParent in
> deleted object CN=NTDS
> Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> -
> <GUID=fd9ce42d-697a-43ea-aeb8-c50bc832a2cb>;CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> Not removing dangling one-way link on deleted object (tombstone garbage
> collection in progress?)
> WARNING: parent object not found for CN=NTDS
> Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
>
> Before the above command I also ran
>
> # samba-tool domain tombstones expunge --tombstone-lifetime=0
> Removed 0 objects and 0 links successfully
>
> and as seen, nothing removed.
>
> I tried to remove the entries via ldapmodify, but it was not possible as
> it says it has child nodes.
>
> # ldbmodify -H /var/lib/samba/private/sam.ldb delete.ldif
> ERR: (Not allowed on non-leaf) "subtree_delete: Unable to delete a
> non-leaf node (it has 2 children)!" on DN CN=NTDS
> Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> at block before line 3
> Modify failed after processing 0 records
>
> Is there any way to check who are the child nodes and remove them? Or is
> this not trivial?
>
> Thanks!!!
> --
> Elias Pereira
>


-- 
Elias Pereira