Failed to prepare commit of transaction: DRS linked attribute for GUID

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Failed to prepare commit of transaction: DRS linked attribute for GUID

Samba - samba-technical mailing list

There is a domain controller on windows 2008R2, DC samba Version 4.6.5
is connected to it. After renaming the user to make mistakes:

[2017/09/04 10:04:54.528818,  2]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
linked_attribute)
  ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
Failed to re-resolve GUID f5d7a9b2-981c-49c9-a262-f3ca4c90272a - using
CN=Пользовтаель Пользоватеть,OU=Users Shop M,DC=euro,DC=ru
[2017/09/04 10:04:54.547960,  2]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
linked_attribute)
  ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e - using
CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
Office,DC=euro,DC=ru
[2017/09/04 10:04:54.615598,  2]
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
linked_attribute)
  ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e - using
CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
Office,DC=euro,DC=ru
[2017/09/04 10:04:54.622398,  0]
../source4/dsdb/repl/replicated_objects.c:933(dsdb_replicated_objects_c
ommit)
  ../source4/dsdb/repl/replicated_objects.c:933 Failed to prepare
commit of transaction: DRS linked attribute for GUID bf04e179-4c7c-
4cf9-b7a3-d37b287b1f3e - DN not found
[2017/09/04 10:04:54.629436,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_ap
ply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE



I tried to start synchronization and got:

samba-tool drs replicate srv-m-dc.euro.ru srv-o.euro.ru OU=Users\ Shop\
M,DC=euro,DC=ru
ERROR(<class 'samba.drs_utils.drsException'>):
DsReplicaSync failed - drsException: DsReplicaSync failed (8440,
'WERR_DS_DRA_BAD_NC')
  File "/usr/lib64/python2.7/site-
packages/samba/netcmd/drs.py", line 368, in run
   
drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
source_dsa_guid, NC, req_options)
  File "/usr/lib64/python2.7/site-
packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
    raise
drsException("DsReplicaSync failed %s" % estr)

Reply | Threaded
Open this post in threaded view
|

Re: Failed to prepare commit of transaction: DRS linked attribute for GUID

Samba - samba-technical mailing list
Hi,

We've seen this problem before when inter-operating with Microsoft. See:
https://lists.samba.org/archive/samba/2017-June/209020.html

The patch that should fix this has been delivered to master. However,
unless we backport the related patches, it won't be in a Samba release
until 4.8.
https://git.samba.org/?p=samba.git;a=commit;h=f87332eb35638cc38f83c580d4623ab978088601

In the meantime you could try running 'samba-tool drs replicate
--local'. This should set the GET_ANC flag in the request, which should
hopefully avoid this problem.

However, note that when inter-operating between Windows and Samba you
could still potentially get cases where replication succeeds, but linked
attributes are dropped (because Samba doesn't know how about the target
object yet). This should be fixed now in the latest master branch.

Cheers,
Tim

On 04/09/17 23:45, denis.shigapov via samba-technical wrote:

>
> There is a domain controller on windows 2008R2, DC samba Version 4.6.5
> is connected to it. After renaming the user to make mistakes:
>
> [2017/09/04 10:04:54.528818,  2]
> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
> linked_attribute)
>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> Failed to re-resolve GUID f5d7a9b2-981c-49c9-a262-f3ca4c90272a - using
> CN=Пользовтаель Пользоватеть,OU=Users Shop M,DC=euro,DC=ru
> [2017/09/04 10:04:54.547960,  2]
> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
> linked_attribute)
>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e - using
> CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> Office,DC=euro,DC=ru
> [2017/09/04 10:04:54.615598,  2]
> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_process_
> linked_attribute)
>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e - using
> CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> Office,DC=euro,DC=ru
> [2017/09/04 10:04:54.622398,  0]
> ../source4/dsdb/repl/replicated_objects.c:933(dsdb_replicated_objects_c
> ommit)
>   ../source4/dsdb/repl/replicated_objects.c:933 Failed to prepare
> commit of transaction: DRS linked attribute for GUID bf04e179-4c7c-
> 4cf9-b7a3-d37b287b1f3e - DN not found
> [2017/09/04 10:04:54.629436,  0]
> ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_ap
> ply_changes_trigger)
>   Failed to commit objects:
> WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
>
>
>
> I tried to start synchronization and got:
>
> samba-tool drs replicate srv-m-dc.euro.ru srv-o.euro.ru OU=Users\ Shop\
> M,DC=euro,DC=ru
> ERROR(<class 'samba.drs_utils.drsException'>):
> DsReplicaSync failed - drsException: DsReplicaSync failed (8440,
> 'WERR_DS_DRA_BAD_NC')
>   File "/usr/lib64/python2.7/site-
> packages/samba/netcmd/drs.py", line 368, in run
>    
> drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
> source_dsa_guid, NC, req_options)
>   File "/usr/lib64/python2.7/site-
> packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
>     raise
> drsException("DsReplicaSync failed %s" % estr)
>

Reply | Threaded
Open this post in threaded view
|

Re: Failed to prepare commit of transaction: DRS linked attribute for GUID

Samba - samba-technical mailing list
Hi
A patch can be rolled into a working samba, or you need to recompile
and reinstall the package?

В Вт, 05/09/2017 в 10:11 +1200, Tim Beale via samba-technical пишет:

> Hi,
>
> We've seen this problem before when inter-operating with Microsoft.
> See:
> https://lists.samba.org/archive/samba/2017-June/209020.html
>
> The patch that should fix this has been delivered to master. However,
> unless we backport the related patches, it won't be in a Samba
> release
> until 4.8.
> https://git.samba.org/?p=samba.git;a=commit;h=f87332eb35638cc38f83c58
> 0d4623ab978088601
>
> In the meantime you could try running 'samba-tool drs replicate
> --local'. This should set the GET_ANC flag in the request, which
> should
> hopefully avoid this problem.
>
> However, note that when inter-operating between Windows and Samba you
> could still potentially get cases where replication succeeds, but
> linked
> attributes are dropped (because Samba doesn't know how about the
> target
> object yet). This should be fixed now in the latest master branch.
>
> Cheers,
> Tim
>
> On 04/09/17 23:45, denis.shigapov via samba-technical wrote:
> >
> > There is a domain controller on windows 2008R2, DC samba Version
> > 4.6.5
> > is connected to it. After renaming the user to make mistakes:
> >
> > [2017/09/04 10:04:54.528818,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> > Failed to re-resolve GUID f5d7a9b2-981c-49c9-a262-f3ca4c90272a -
> > using
> > CN=Пользовтаель Пользоватеть,OU=Users Shop M,DC=euro,DC=ru
> > [2017/09/04 10:04:54.547960,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
> > Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
> > using
> > CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> > Office,DC=euro,DC=ru
> > [2017/09/04 10:04:54.615598,  2]
> > ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
> > ess_
> > linked_attribute)
> >   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271:
> > WARNING:
> > Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
> > using
> > CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
> > Office,DC=euro,DC=ru
> > [2017/09/04 10:04:54.622398,  0]
> > ../source4/dsdb/repl/replicated_objects.c:933(dsdb_replicated_objec
> > ts_c
> > ommit)
> >   ../source4/dsdb/repl/replicated_objects.c:933 Failed to prepare
> > commit of transaction: DRS linked attribute for GUID bf04e179-4c7c-
> > 4cf9-b7a3-d37b287b1f3e - DN not found
> > [2017/09/04 10:04:54.629436,  0]
> > ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_sourc
> > e_ap
> > ply_changes_trigger)
> >   Failed to commit objects:
> > WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
> >
> >
> >
> > I tried to start synchronization and got:
> >
> > samba-tool drs replicate srv-m-dc.euro.ru srv-o.euro.ru OU=Users\
> > Shop\
> > M,DC=euro,DC=ru
> > ERROR(<class 'samba.drs_utils.drsException'>):
> > DsReplicaSync failed - drsException: DsReplicaSync failed (8440,
> > 'WERR_DS_DRA_BAD_NC')
> >   File "/usr/lib64/python2.7/site-
> > packages/samba/netcmd/drs.py", line 368, in run
> >    
> > drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
> > source_dsa_guid, NC, req_options)
> >   File "/usr/lib64/python2.7/site-
> > packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
> >     raise
> > drsException("DsReplicaSync failed %s" % estr)
> >
>
>

Reply | Threaded
Open this post in threaded view
|

Re: Failed to prepare commit of transaction: DRS linked attribute for GUID

Samba - samba-technical mailing list
Hi,

No, you can't patch the working samba. You would need to clone the git
repo, build it, and reinstall samba.

Did you try 'samba-tool drs replicate --local' to see if that helps?

Cheers,
Tim

On 06/09/17 00:40, denis.shigapov via samba-technical wrote:

> Hi
> A patch can be rolled into a working samba, or you need to recompile
> and reinstall the package?
>
> В Вт, 05/09/2017 в 10:11 +1200, Tim Beale via samba-technical пишет:
>> Hi,
>>
>> We've seen this problem before when inter-operating with Microsoft.
>> See:
>> https://lists.samba.org/archive/samba/2017-June/209020.html
>>
>> The patch that should fix this has been delivered to master. However,
>> unless we backport the related patches, it won't be in a Samba
>> release
>> until 4.8.
>> https://git.samba.org/?p=samba.git;a=commit;h=f87332eb35638cc38f83c58
>> 0d4623ab978088601
>>
>> In the meantime you could try running 'samba-tool drs replicate
>> --local'. This should set the GET_ANC flag in the request, which
>> should
>> hopefully avoid this problem.
>>
>> However, note that when inter-operating between Windows and Samba you
>> could still potentially get cases where replication succeeds, but
>> linked
>> attributes are dropped (because Samba doesn't know how about the
>> target
>> object yet). This should be fixed now in the latest master branch.
>>
>> Cheers,
>> Tim
>>
>> On 04/09/17 23:45, denis.shigapov via samba-technical wrote:
>>>
>>> There is a domain controller on windows 2008R2, DC samba Version
>>> 4.6.5
>>> is connected to it. After renaming the user to make mistakes:
>>>
>>> [2017/09/04 10:04:54.528818,  2]
>>> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
>>> ess_
>>> linked_attribute)
>>>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
>>> Failed to re-resolve GUID f5d7a9b2-981c-49c9-a262-f3ca4c90272a -
>>> using
>>> CN=Пользовтаель Пользоватеть,OU=Users Shop M,DC=euro,DC=ru
>>> [2017/09/04 10:04:54.547960,  2]
>>> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
>>> ess_
>>> linked_attribute)
>>>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271: WARNING:
>>> Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
>>> using
>>> CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
>>> Office,DC=euro,DC=ru
>>> [2017/09/04 10:04:54.615598,  2]
>>> ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271(replmd_proc
>>> ess_
>>> linked_attribute)
>>>   ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:6271:
>>> WARNING:
>>> Failed to re-resolve GUID bf04e179-4c7c-4cf9-b7a3-d37b287b1f3e -
>>> using
>>> CN=Пользоватеть2 Пользователь2,OU=продажи,OU=магазин,OU=Users
>>> Office,DC=euro,DC=ru
>>> [2017/09/04 10:04:54.622398,  0]
>>> ../source4/dsdb/repl/replicated_objects.c:933(dsdb_replicated_objec
>>> ts_c
>>> ommit)
>>>   ../source4/dsdb/repl/replicated_objects.c:933 Failed to prepare
>>> commit of transaction: DRS linked attribute for GUID bf04e179-4c7c-
>>> 4cf9-b7a3-d37b287b1f3e - DN not found
>>> [2017/09/04 10:04:54.629436,  0]
>>> ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_sourc
>>> e_ap
>>> ply_changes_trigger)
>>>   Failed to commit objects:
>>> WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
>>>
>>>
>>>
>>> I tried to start synchronization and got:
>>>
>>> samba-tool drs replicate srv-m-dc.euro.ru srv-o.euro.ru OU=Users\
>>> Shop\
>>> M,DC=euro,DC=ru
>>> ERROR(<class 'samba.drs_utils.drsException'>):
>>> DsReplicaSync failed - drsException: DsReplicaSync failed (8440,
>>> 'WERR_DS_DRA_BAD_NC')
>>>   File "/usr/lib64/python2.7/site-
>>> packages/samba/netcmd/drs.py", line 368, in run
>>>    
>>> drs_utils.sendDsReplicaSync(server_bind, server_bind_handle,
>>> source_dsa_guid, NC, req_options)
>>>   File "/usr/lib64/python2.7/site-
>>> packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
>>>     raise
>>> drsException("DsReplicaSync failed %s" % estr)
>>>
>>
>>
>

Reply | Threaded
Open this post in threaded view
|

Re: Failed to prepare commit of transaction: DRS linked attribute for GUID

Samba - samba-technical mailing list
In reply to this post by Samba - samba-technical mailing list
On Tue, 2017-09-05 at 17:40 +0500, denis.shigapov via samba-technical
wrote:
> Hi
> A patch can be rolled into a working samba, or you need to recompile
> and reinstall the package?

You need to re-compile and re-install the package.

Andrew Bartlett
--
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT  
https://catalyst.net.nz/services/samba