[Samba] replication issue..?

[Rowland Penny]

On Wed, 9 Sep 2026 23:03:00 +0200
Joachim Lindenberg via samba <samba at lists.samba.org> wrote:

> I am experiencing a replication issue. A computer joined is existing
> in DC cobra only, and missing in DC boa. Replication was not broken
> from day one, but now samba-tool drs showrepl shows “Last success @
> NTTIME(0)” in many places. The output is very long as I have a total
> of four DCs, two of them offsite and offline for different intervals.

It isn't a good idea for a DC to be offline for long, the time can be
different when they come back online and then replication will not
occur. Why do they go offline ? are they being turned off ?

> 
>  
> 
> Before taking any corrective measures w.r.t. replication
> configuration, I wanted to achieve that cobra contains all data if
> possible. Therefore I tried to manually replicate objects without
> --full-sync. That turns out to work for three naming contexts and
> fails for the most relevant (w.r.t. missing computer object).
> 
>  
> 
> root at boa:/var/log/samdom# samdom-tool drs replicate
> boa.samdom.example.org cobra.samdom.example.org
> CN=Configuration,dc=samdom,dc=example,dc=org
> 
> Replicate from cobra.samdom.example.org to boa.samdom.example.org was
> successful.
> 
> root at boa:/var/log/samdom# samdom-tool drs replicate
> boa.samdom.example.org cobra.samdom.example.org
> CN=DomainDnsZone,dc=samdom,dc=example,dc=org
> 
> Replicate from cobra.samdom.example.org to boa.samdom.example.org was
> successful.
> 
> root at boa:/var/log/samdom# samdom-tool drs replicate
> boa.samdom.example.org cobra.samdom.example.org
> CN=Schema,CN=Configuration,dc=samdom,dc=example,dc=org
> 
> Replicate from cobra.samdom.example.org to boa.samdom.example.org was
> successful.
> 
> root at boa:/var/log/samdom# samdom-tool drs replicate
> boa.samdom.example.org cobra.samdom.example.org
> dc=samdom,dc=example,dc=org
> 
> ERROR(<class 'samdom.drs_utils.drsException'>): DsReplicaSync failed
> - drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')
> 
>  
> 
> As only one naming context fails, I assume network is ok.
> 
>  
> 
> root at cobra:/home/joachim# samdom-tool dbcheck --cross-ncs
> 
> Checking 4306 objects
> 
> Checked 4306 objects (0 errors)
> 
>  
> 
> root at boa:/var/log/samdom# samdom-tool dbcheck --cross-ncs
> 
> Checking 4296 objects
> 
> WARNING: no target object found for GUID comporgnt link
> lastKnownParent in deleted object
> CN=2024-12-21T14:34:46\+01:00{F7D41B5A-7F71-4932-845A-27194999D48C}\0ADEL:448a9c07-572c-48d6-bf27-20969b734541,CN=Deleted
> Objects,DC=samdom,DC=example,DC=org -
> <GUID=5ffeb1e7-e89e-4b5a-902e-24c833791e9b>;<SID=S-1-5-21-671343811-1688140201-507615706-5406>;CN=MEDION\0ADEL:5ffeb1e7-e89e-4b5a-902e-24c833791e9b,CN=Deleted
> Objects,DC=samdom,DC=example,DC=org
> 
> Not removing dangling one-way link on deleted object (tombstone
> garbage collection in progress?)
> 
> WARNING: no target object found for GUID comporgnt link
> lastKnownParent in deleted object
> CN=2024-12-21T14:34:43\+01:00{1E2ADC40-1B84-49F2-938B-86BA1C4C97A6}\0ADEL:7f0943b7-4c3b-46fa-aba3-86a9595f5bff,CN=Deleted
> Objects,DC=samdom,DC=example,DC=org -
> <GUID=5ffeb1e7-e89e-4b5a-902e-24c833791e9b>;<SID=S-1-5-21-671343811-1688140201-507615706-5406>;CN=MEDION\0ADEL:5ffeb1e7-e89e-4b5a-902e-24c833791e9b,CN=Deleted
> Objects,DC=samdom,DC=example,DC=org
> 
> Not removing dangling one-way link on deleted object (tombstone
> garbage collection in progress?)
> 
> Checked 4296 objects (0 errors)
> 
>  
> 
> What may cause the 'WERR_BAD_NET_RESP'? At least searching didn´t
> tell me that the error is caused by the dangling objects.
> 
> How can I replicate potentially missing objects or verify there are
> none missing in cobra?

I thought that everything was on 'cobra' and was missing from 'boa'

> 
> And once I have everything on cobra, how can I repair replication? Or
> is the recommendation to rejoin?

It can often be quicker and easier to demote a faulty DC and replace it
with a new one, but unless you stop the other DCs going offline, it may
happen again.

Rowland