[Samba] replication issue..?

[Joachim Lindenberg]

I am experiencing a replication issue. A computer joined is existing in DC cobra only, and missing in DC boa. Replication was not broken from day one, but now samba-tool drs showrepl shows “Last success @ NTTIME(0)” in many places. The output is very long as I have a total of four DCs, two of them offsite and offline for different intervals.

 

Before taking any corrective measures w.r.t. replication configuration, I wanted to achieve that cobra contains all data if possible. Therefore I tried to manually replicate objects without --full-sync. That turns out to work for three naming contexts and fails for the most relevant (w.r.t. missing computer object).

 

root at boa:/var/log/samdom# samdom-tool drs replicate boa.samdom.example.org cobra.samdom.example.org CN=Configuration,dc=samdom,dc=example,dc=org

Replicate from cobra.samdom.example.org to boa.samdom.example.org was successful.

root at boa:/var/log/samdom# samdom-tool drs replicate boa.samdom.example.org cobra.samdom.example.org CN=DomainDnsZone,dc=samdom,dc=example,dc=org

Replicate from cobra.samdom.example.org to boa.samdom.example.org was successful.

root at boa:/var/log/samdom# samdom-tool drs replicate boa.samdom.example.org cobra.samdom.example.org CN=Schema,CN=Configuration,dc=samdom,dc=example,dc=org

Replicate from cobra.samdom.example.org to boa.samdom.example.org was successful.

root at boa:/var/log/samdom# samdom-tool drs replicate boa.samdom.example.org cobra.samdom.example.org dc=samdom,dc=example,dc=org

ERROR(<class 'samdom.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')

 

As only one naming context fails, I assume network is ok.

 

root at cobra:/home/joachim# samdom-tool dbcheck --cross-ncs

Checking 4306 objects

Checked 4306 objects (0 errors)

 

root at boa:/var/log/samdom# samdom-tool dbcheck --cross-ncs

Checking 4296 objects

WARNING: no target object found for GUID comporgnt link lastKnownParent in deleted object CN=2024-12-21T14:34:46\+01:00{F7D41B5A-7F71-4932-845A-27194999D48C}\0ADEL:448a9c07-572c-48d6-bf27-20969b734541,CN=Deleted Objects,DC=samdom,DC=example,DC=org - <GUID=5ffeb1e7-e89e-4b5a-902e-24c833791e9b>;<SID=S-1-5-21-671343811-1688140201-507615706-5406>;CN=MEDION\0ADEL:5ffeb1e7-e89e-4b5a-902e-24c833791e9b,CN=Deleted Objects,DC=samdom,DC=example,DC=org

Not removing dangling one-way link on deleted object (tombstone garbage collection in progress?)

WARNING: no target object found for GUID comporgnt link lastKnownParent in deleted object CN=2024-12-21T14:34:43\+01:00{1E2ADC40-1B84-49F2-938B-86BA1C4C97A6}\0ADEL:7f0943b7-4c3b-46fa-aba3-86a9595f5bff,CN=Deleted Objects,DC=samdom,DC=example,DC=org - <GUID=5ffeb1e7-e89e-4b5a-902e-24c833791e9b>;<SID=S-1-5-21-671343811-1688140201-507615706-5406>;CN=MEDION\0ADEL:5ffeb1e7-e89e-4b5a-902e-24c833791e9b,CN=Deleted Objects,DC=samdom,DC=example,DC=org

Not removing dangling one-way link on deleted object (tombstone garbage collection in progress?)

Checked 4296 objects (0 errors)

 

What may cause the 'WERR_BAD_NET_RESP'? At least searching didn´t tell me that the error is caused by the dangling objects.

How can I replicate potentially missing objects or verify there are none missing in cobra?

And once I have everything on cobra, how can I repair replication? Or is the recommendation to rejoin?

 

Thanks,

Joachim