[Samba] dbcheck gets uncaught exception

[Heiko Robert]

> Do not touch 'DC=DOMAINDNSZONES,DC=COMPANY,DC=INTRA.ldb' (or any of the
> other files in the same directory) directly, do all changes through
> sam.ldb, otherwise you have a very good risk of further damaging your
> database.

I'm not sure if the dup keys in the 
'DC=DOMAINDNSZONES,DC=COMPANY,DC=INTRA.ldb' is my root issue and why the 
dbcheck fails with that uncaught exception. How would I fix such a 
duplicate key in that file through sam.ldb?

To identify the dup key I creted a tdbdump and then counted the keys:

awk '$1 ~ /^key/ {print $3}' DOMAINDNSZONES.tdbdump |sort|uniq -c | sort 
-nr | head

the dupliate entry is

{
key(42) = "DN=@INDEX:USNCHANGED:p0000000000000048557\00"
data(116) = 
"h\19\01&\02\00\00\00&\00\00\00 at INDEX:USNCHANGED:p0000000000000048557\00\00\00\00\00\00)\00\00\00\0B\00\00\00 at IDXVERSION\00\01\00\00\00\01\01\04\00\00\00 at IDX\00\01\00\00\00\01\103\00$s$\BB\D6;UJ\B1|\F3\B5\90l6\A4\00"
}


Maybe it is related or not but in log.samba I also see

   ldb: acl_read: cannot get descriptor of 
DC=DomainDnsZones,DC=ecm4u,DC=intra: Operations error

I don't know what to do with all this either. The samba-ad ran for years 
and we never realized that there was a problem. Today I know that a 
replication or an online backup would stumble over such errors.

Any kind of feedback is welcome.