[Samba] WARNING: no target object found for GUID component link lastKnownParent in deleted object

[Andrew Bartlett]

While this should work, neither is this particularly harmful.  Links to
objects that don't exist are ignored at runtime.

Andrew Bartlett

On Tue, 2023-04-04 at 14:39 -0300, Elias Pereira via samba wrote:
> hi,
> 
> Any clue?
> 
> On Mon, Apr 3, 2023 at 10:17 AM Elias Pereira <empbilly at gmail.com> wrote:
> 
> > hi,
> > 
> > I have this DC in aws to fulfill the authentication need of our moodle.
> > 
> > # samba -V
> > Version 4.17.7-Debian
> > 
> > DNS with SAMBA_INTERNAL
> > 
> > The replication of the users and groups happens correctly. Some errors in
> > running samba_dnsupdate, but it is ok anyway.
> > 
> > When I ran the command samba-tool dbcheck, I got the return below.
> > 
> > # samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes
> > Checking 15765 objects
> > WARNING: no target object found for GUID component link lastKnownParent in
> > deleted object CN=NTDS
> > Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > -
> > <GUID=650386f2-bc40-45ba-b652-222baa646a96>;CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > Not removing dangling one-way link on deleted object (tombstone garbage
> > collection in progress?)
> > WARNING: parent object not found for CN=NTDS
> > Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > Not moving to LostAndFound (tombstone garbage collection in progress?)
> > WARNING: no target object found for GUID component link fromServer in
> > deleted object CN=aba17177-dffd-4834-870c-4311449770b4,CN=NTDS
> > Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > - <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
> > Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > Not removing dangling one-way link on deleted object (tombstone garbage
> > collection in progress?)
> > WARNING: no target object found for GUID component link fromServer in
> > deleted object CN=a4ceb105-f308-4e76-84ad-b17b4a3c57c0,CN=NTDS
> > Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > - <GUID=df8357a0-8331-4c51-9009-82fb0aa23b81>;CN=NTDS
> > Settings\0ADEL:df8357a0-8331-4c51-9009-82fb0aa23b81,CN=DC3\0ADEL:91e4f5fd-4976-49f7-8ba7-f7660e0aa1b4,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > Not removing dangling one-way link on deleted object (tombstone garbage
> > collection in progress?)
> > WARNING: no target object found for GUID component link lastKnownParent in
> > deleted object CN=NTDS
> > Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > -
> > <GUID=fd9ce42d-697a-43ea-aeb8-c50bc832a2cb>;CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > Not removing dangling one-way link on deleted object (tombstone garbage
> > collection in progress?)
> > WARNING: parent object not found for CN=NTDS
> > Settings\0ADEL:c3c1d5bf-17fe-4c12-a5f8-61d68bab2e89,CN=DC4\0ADEL:fd9ce42d-697a-43ea-aeb8-c50bc832a2cb,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > 
> > Before the above command I also ran
> > 
> > # samba-tool domain tombstones expunge --tombstone-lifetime=0
> > Removed 0 objects and 0 links successfully
> > 
> > and as seen, nothing removed.
> > 
> > I tried to remove the entries via ldapmodify, but it was not possible as
> > it says it has child nodes.
> > 
> > # ldbmodify -H /var/lib/samba/private/sam.ldb delete.ldif
> > ERR: (Not allowed on non-leaf) "subtree_delete: Unable to delete a
> > non-leaf node (it has 2 children)!" on DN CN=NTDS
> > Settings\0ADEL:8161a0ff-3aa4-49e1-94fc-50d9299b1abd,CN=DC4\0ADEL:650386f2-bc40-45ba-b652-222baa646a96,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=campus,DC=sertao,DC=ifrs,DC=edu,DC=br
> > at block before line 3
> > Modify failed after processing 0 records
> > 
> > Is there any way to check who are the child nodes and remove them? Or is
> > this not trivial?
> > 
> > Thanks!!!
> > --
> > Elias Pereira
> > 
> 
> 
> -- 
> Elias Pereira

-- 
Andrew Bartlett (he/him) https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba