Replication Error

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Replication Error

Samba - General mailing list
Hi

I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
AD 4.7.2 The Inbound replication on the Server-1 is failing with the error
below:

DC=iumnet,DC=edu,DC=na
        Default-First-Site-Name\Server-2 via RPC
                DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
                Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed, result
58 (WERR_BAD_NET_RESP)
                15333 consecutive failure(s).
                Last success @ Wed Nov 22 13:48:30 2017 WAST

Please help to fix it.

Thanks n Regards

*Harsh Kukreja *Systems Administrator
*International University of Namibia *Tel: 061-4336000 - E-mail: h.kukreja
@ium.edu.na - Web:
*http://www.ium.edu.na <http://www.ium.edu.na/>*Private Bag
14005,Bachbrech. 21-31 Hercules Street, Dorado Park, Windhoek, NAMIBIA
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication Error

Samba - General mailing list
Hi Harsh,

> I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
> AD 4.7.2 The Inbound replication on the Server-1 is failing with the error
> below:
>
> DC=iumnet,DC=edu,DC=na
>         Default-First-Site-Name\Server-2 via RPC
>                 DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
>                 Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed, result
> 58 (WERR_BAD_NET_RESP)
>                 15333 consecutive failure(s).
>                 Last success @ Wed Nov 22 13:48:30 2017 WAST
>
> Please help to fix it.

sorry, my crystal ball is on maintenance. We'll need some more
information. Increase your log level by adding the following line to
smb.conf:
        log level = 9 dns:0

It's going to be very verbose. You'll usually get the entry having
replication issue at the end of the replication log.

By the way, you'll should upgrade to 4.7.4, there has been quite a few
bug fixes since 4.7.2.

Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?

Cheers,

Denis

--
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication Error

Samba - General mailing list
Hi Denis

Thanks for your response without your crystal ball.

I have increased the log level =9 dns:0 on both the servers. It replicates
successfully by manually running the command
 samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync

but it is still failing when I check from the samba-tool drs showrepl

Also I run samba-tool dbcheck --cross-ncs --fix on both the servers which
didn't fix it. Please let me know how to check the replication Logs.

I will upgrade to the latest 4.7.4 to see if it fixes the problem.

On some of the Win7 clients after the password reset when the user changes
their password on the logon screen it keeps on saying " Your Password has
expired and must be Changed" even after the password is changed. What can
be the reason behind this issue.

Regards

Harsh

*Harsh Kukreja *Systems Administrator
*International University of Namibia *Tel: 061-4336000 - E-mail: h.kukreja
@ium.edu.na - Web:
*http://www.ium.edu.na <http://www.ium.edu.na/>*Private Bag
14005,Bachbrech. 21-31 Hercules Street, Dorado Park, Windhoek, NAMIBIA






On Tue, Jan 9, 2018 at 1:22 PM, Denis Cardon <[hidden email]> wrote:

> Hi Harsh,
>
> I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4
>> AD 4.7.2 The Inbound replication on the Server-1 is failing with the error
>> below:
>>
>> DC=iumnet,DC=edu,DC=na
>>         Default-First-Site-Name\Server-2 via RPC
>>                 DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311
>>                 Last attempt @ Tue Jan  9 12:55:59 2018 WAST failed,
>> result
>> 58 (WERR_BAD_NET_RESP)
>>                 15333 consecutive failure(s).
>>                 Last success @ Wed Nov 22 13:48:30 2017 WAST
>>
>> Please help to fix it.
>>
>
> sorry, my crystal ball is on maintenance. We'll need some more
> information. Increase your log level by adding the following line to
> smb.conf:
>         log level = 9 dns:0
>
> It's going to be very verbose. You'll usually get the entry having
> replication issue at the end of the replication log.
>
> By the way, you'll should upgrade to 4.7.4, there has been quite a few bug
> fixes since 4.7.2.
>
> Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?
>
> Cheers,
>
> Denis
>
> --
> Denis Cardon
> Tranquil IT Systems
> Les Espaces Jules Verne, bâtiment A
> 12 avenue Jules Verne
> 44230 Saint Sébastien sur Loire
> tel : +33 (0) 2.40.97.57.55
> http://www.tranquil-it-systems.fr
>
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication Error

Samba - General mailing list
Hi Harsh,

> Thanks for your response without your crystal ball.
>
> I have increased the log level =9 dns:0 on both the servers. It
> replicates successfully by manually running the command
>  samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync

--full-sync copy the whole partition and may hide problems. If there is
a corrupted entry in it, I guess it may copy it along too.

I've seen different execution/integrity check path for synchronization
in the past. For example when you join a new DC, I have seen initial
join replication happily replicating a corrupted entry. However if on
the same domain I would join the DC with --critical-objects-only, it
will join but won't be able to replicate the partitions afterward.

In your log file, you should look for the following lines and post the
10-20 lines before those to see which entry has problem:

  Failed to commit objects:
  WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE

> but it is still failing when I check from the samba-tool drs showrepl
>
> Also I run samba-tool dbcheck --cross-ncs --fix on both the servers
> which didn't fix it. Please let me know how to check the replication Logs.

did you have any warning/error message out of dbcheck --cross-ncs? I
have seen quite a few issues with group membership after upgrade to 4.7
from 4.6.

> I will upgrade to the latest 4.7.4 to see if it fixes the problem.
>
> On some of the Win7 clients after the password reset when the user
> changes their password on the logon screen it keeps on saying " Your
> Password has expired and must be Changed" even after the password is
> changed. What can be the reason behind this issue.

can you try to change it with kpasswd on the DC to see if you have the
same behavior?

Denis

>
> Regards
>
> Harsh
>
> *Harsh Kukreja *Systems Administrator
>
> **International University of Namibia* *Tel: 061-4336000 -
> E-mail: [hidden email]
> <mailto:[hidden email]> - Web: _http://www.ium.edu.na
> <http://www.ium.edu.na/>
> _Private Bag 14005,Bachbrech. 21-31 Hercules Street, Dorado Park,
> Windhoek, NAMIBIA
>
> ____
>
>
>
>
>
>
>
>
>
>
> On Tue, Jan 9, 2018 at 1:22 PM, Denis Cardon <[hidden email]
> <mailto:[hidden email]>> wrote:
>
>     Hi Harsh,
>
>         I am running Server-1 Samba4 AD 4.6.10 with an additional
>         Server-2 Samba4
>         AD 4.7.2 The Inbound replication on the Server-1 is failing with
>         the error
>         below:
>
>         DC=iumnet,DC=edu,DC=na
>                 Default-First-Site-Name\Server-2 via RPC
>                         DSA object GUID:
>         27182378-a9c7-451e-bb95-7b2172a5f311
>                         Last attempt @ Tue Jan  9 12:55:59 2018 WAST
>         failed, result
>         58 (WERR_BAD_NET_RESP)
>                         15333 consecutive failure(s).
>                         Last success @ Wed Nov 22 13:48:30 2017 WAST
>
>         Please help to fix it.
>
>
>     sorry, my crystal ball is on maintenance. We'll need some more
>     information. Increase your log level by adding the following line to
>     smb.conf:
>             log level = 9 dns:0
>
>     It's going to be very verbose. You'll usually get the entry having
>     replication issue at the end of the replication log.
>
>     By the way, you'll should upgrade to 4.7.4, there has been quite a
>     few bug fixes since 4.7.2.
>
>     Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?
>
>     Cheers,
>
>     Denis
>
>     --
>     Denis Cardon
>     Tranquil IT Systems
>     Les Espaces Jules Verne, bâtiment A
>     12 avenue Jules Verne
>     44230 Saint Sébastien sur Loire
>     tel : +33 (0) 2.40.97.57.55 <tel:%2B33%20%280%29%202.40.97.57.55>
>     http://www.tranquil-it-systems.fr <http://www.tranquil-it-systems.fr>
>
>

--
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication Error

Samba - General mailing list
Hi Denis

Please find below the logs

SERVER-2
root@iumsvrpdc:/home/administrator# tail -f -n 30 /var/log/samba/log.samba
[2018/01/10 12:47:04.162613,  3]
../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
  UpdateRefs on getncchanges for 8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe
[2018/01/10 12:47:04.162667,  4]
../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
  DsReplicaUpdateRefs for host '8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na' with GUID 8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe options
0x00000007
nc=<GUID=a218c4ba-d0cc-4e23-98db-375ab5e77a7d>;DC=ForestDnsZones,DC=iumnet,DC=edu,DC=na
[2018/01/10 12:47:04.163180,  2]
../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
  DsGetNCChanges with uSNChanged >= 141477 flags 0x00000064 on
<GUID=a218c4ba-d0cc-4e23-98db-375ab5e77a7d>;DC=ForestDnsZones,DC=iumnet,DC=edu,DC=na
gave 0 objects (done 0/0) 0 links (done 0/0 (as
S-1-5-21-3657809387-4003246294-368203321-126331))
[2018/01/10 12:47:05.348143,  4]
../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
  DsReplicaUpdateRefs for host '8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na' with GUID 8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe options
0x0000001c
nc=<GUID=a218c4ba-d0cc-4e23-98db-375ab5e77a7d>;DC=ForestDnsZones,DC=iumnet,DC=edu,DC=na
[2018/01/10 12:47:05.890340,  4]
../source4/dsdb/repl/drepl_partitions.c:580(dreplsrv_refresh_partition)
  dreplsrv_refresh_partition(DC=DomainDnsZones,DC=iumnet,DC=edu,DC=na)
[2018/01/10 12:47:05.891465,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.891509,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.891533,  4]
../source4/dsdb/repl/drepl_partitions.c:580(dreplsrv_refresh_partition)
  dreplsrv_refresh_partition(DC=ForestDnsZones,DC=iumnet,DC=edu,DC=na)
[2018/01/10 12:47:05.892336,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.892394,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.892421,  4]
../source4/dsdb/repl/drepl_partitions.c:580(dreplsrv_refresh_partition)
  dreplsrv_refresh_partition(CN=Configuration,DC=iumnet,DC=edu,DC=na)
[2018/01/10 12:47:05.893148,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.893200,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b3-445e-8eb3-ff74cdd7e0fe._
msdcs.iumnet.edu.na): attach
[2018/01/10 12:47:05.893226,  4]
../source4/dsdb/repl/drepl_partitions.c:580(dreplsrv_refresh_partition)
  dreplsrv_refresh_partition(DC=iumnet,DC=edu,DC=na)
[2018/01/10 12:47:05.894114,  4]
../source4/dsdb/repl/drepl_partitions.c:355(dreplsrv_out_connection_attach)
  dreplsrv_out_connection_attach(8bf63977-f3b

SERVER-1

root@iumdcdp01:/home/administrator# tail -f -n 20 /var/log/samba/log.samba
[2018/01/10 12:41:12.566796,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2030(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2030: DsGetNCChanges 2nd
replication on DN CN=IUM,CN=Computers,DC=iumnet,DC=edu,DC=na newer
highwatermark (last_dn (null))
[2018/01/10 12:41:36.413129,  0]
../source4/rpc_server/drsuapi/getncchanges.c:2016(dcesrv_drsuapi_DsGetNCChanges)
  ../source4/rpc_server/drsuapi/getncchanges.c:2016: DsGetNCChanges 2nd
replication on different DN DC=DomainDnsZones,DC=iumnet,DC=edu,DC=na
CN=IUM,CN=Computers,DC=iumnet,DC=edu,DC=na (last_dn (null))
[2018/01/10 12:42:06.066673,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:42:07.289589,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:42:08.595456,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:42:08.797241,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2018/01/10 12:42:09.713939,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:42:30.207177,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2018/01/10 12:44:14.272380,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:44:15.379533,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:44:17.460031,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:44:18.311985,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:46:05.789027,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2018/01/10 12:47:10.411699,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2018/01/10 12:52:06.024310,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:52:06.944848,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:52:08.150044,  0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
  Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
[2018/01/10 12:52:16.933561,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database.
[2018/01/10 12:52:17.948372,  0]
../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
  /usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major =
Unspecified GSS failure.  Minor code may provide more information, Minor =
Server not found in Kerberos database

When I run samba-tool dbcheck --cross-ncs --fix --yes on SERVER-2

Checking 5893 objects
WARNING: no target object found for GUID component for DN value fromServer
in object
CN=7ba6644a-80b0-4e4a-b31c-37f0f1686c5a,CN=LostAndFoundConfig,CN=Configuration,DC=iumnet,DC=edu,DC=na
- <GUID=4c9a5b63-a53a-4476-8bfa-3f5200ba9837>;CN=NTDS
Settings,CN=IUMDCDP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=iumnet,DC=edu,DC=na
WARNING: target DN is deleted for fromServer in object
CN=7ba6644a-80b0-4e4a-b31c-37f0f1686c5a,CN=LostAndFoundConfig,CN=Configuration,DC=iumnet,DC=edu,DC=na
- <GUID=4c9a5b63-a53a-4476-8bfa-3f5200ba9837>;CN=NTDS
Settings,CN=IUMDCDP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=iumnet,DC=edu,DC=na
Target GUID points at deleted DN
'<GUID=4c9a5b63-a53a-4476-8bfa-3f5200ba9837>;CN=NTDS
Settings,CN=IUMDCDP,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=iumnet,DC=edu,DC=na'
Remove stale DN link? [YES]
ERROR: Failed to remove deleted DN attribute fromServer : (65,
"objectclass_attrs: at least one mandatory attribute ('fromServer') on
entry
'CN=7ba6644a-80b0-4e4a-b31c-37f0f1686c5a,CN=LostAndFoundConfig,CN=Configuration,DC=iumnet,DC=edu,DC=na'
wasn't specified!")
  File "/usr/lib/python2.7/dist-packages/samba/dbchecker.py", line 366, in
do_modify
    self.samdb.modify(m, controls=controls, validate=validate)

The Kpasswd command works. Please assist to fix the drs replication issue.

Thanks n Regards

Harsh

*Harsh Kukreja *Systems Administrator
*International University of Namibia *Tel: 061-4336000 - E-mail: h.kukreja
@ium.edu.na - Web:
*http://www.ium.edu.na <http://www.ium.edu.na/>*Private Bag
14005,Bachbrech. 21-31 Hercules Street, Dorado Park, Windhoek, NAMIBIA






On Tue, Jan 9, 2018 at 4:23 PM, Denis Cardon <[hidden email]> wrote:

> Hi Harsh,
>
> Thanks for your response without your crystal ball.
>>
>> I have increased the log level =9 dns:0 on both the servers. It
>> replicates successfully by manually running the command
>>  samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na
>> --full-sync
>>
>
> --full-sync copy the whole partition and may hide problems. If there is a
> corrupted entry in it, I guess it may copy it along too.
>
> I've seen different execution/integrity check path for synchronization in
> the past. For example when you join a new DC, I have seen initial join
> replication happily replicating a corrupted entry. However if on the same
> domain I would join the DC with --critical-objects-only, it will join but
> won't be able to replicate the partitions afterward.
>
> In your log file, you should look for the following lines and post the
> 10-20 lines before those to see which entry has problem:
>
>  Failed to commit objects:
>  WERR_GENERAL_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE
>
> but it is still failing when I check from the samba-tool drs showrepl
>>
>> Also I run samba-tool dbcheck --cross-ncs --fix on both the servers
>> which didn't fix it. Please let me know how to check the replication Logs.
>>
>
> did you have any warning/error message out of dbcheck --cross-ncs? I have
> seen quite a few issues with group membership after upgrade to 4.7 from 4.6.
>
> I will upgrade to the latest 4.7.4 to see if it fixes the problem.
>>
>> On some of the Win7 clients after the password reset when the user
>> changes their password on the logon screen it keeps on saying " Your
>> Password has expired and must be Changed" even after the password is
>> changed. What can be the reason behind this issue.
>>
>
> can you try to change it with kpasswd on the DC to see if you have the
> same behavior?
>
> Denis
>
>
>> Regards
>>
>> Harsh
>>
>> *Harsh Kukreja *Systems Administrator
>>
>> **International University of Namibia* *Tel: 061-4336000 -
>> E-mail: [hidden email]
>> <mailto:[hidden email]> - Web: _http://www.ium.edu.na
>> <http://www.ium.edu.na/>
>> _Private Bag 14005,Bachbrech. 21-31 Hercules Street, Dorado Park,
>> Windhoek, NAMIBIA
>>
>> ____
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> On Tue, Jan 9, 2018 at 1:22 PM, Denis Cardon <[hidden email]
>> <mailto:[hidden email]>> wrote:
>>
>>     Hi Harsh,
>>
>>         I am running Server-1 Samba4 AD 4.6.10 with an additional
>>         Server-2 Samba4
>>         AD 4.7.2 The Inbound replication on the Server-1 is failing with
>>         the error
>>         below:
>>
>>         DC=iumnet,DC=edu,DC=na
>>                 Default-First-Site-Name\Server-2 via RPC
>>                         DSA object GUID:
>>         27182378-a9c7-451e-bb95-7b2172a5f311
>>                         Last attempt @ Tue Jan  9 12:55:59 2018 WAST
>>         failed, result
>>         58 (WERR_BAD_NET_RESP)
>>                         15333 consecutive failure(s).
>>                         Last success @ Wed Nov 22 13:48:30 2017 WAST
>>
>>         Please help to fix it.
>>
>>
>>     sorry, my crystal ball is on maintenance. We'll need some more
>>     information. Increase your log level by adding the following line to
>>     smb.conf:
>>             log level = 9 dns:0
>>
>>     It's going to be very verbose. You'll usually get the entry having
>>     replication issue at the end of the replication log.
>>
>>     By the way, you'll should upgrade to 4.7.4, there has been quite a
>>     few bug fixes since 4.7.2.
>>
>>     Have you run a samba-tool dbcheck --cross-ncs on your 4.7.2 server?
>>
>>     Cheers,
>>
>>     Denis
>>
>>     --
>>     Denis Cardon
>>     Tranquil IT Systems
>>     Les Espaces Jules Verne, bâtiment A
>>     12 avenue Jules Verne
>>     44230 Saint Sébastien sur Loire
>>     tel : +33 (0) 2.40.97.57.55 <tel:%2B33%20%280%29%202.40.97.57.55>
>>     http://www.tranquil-it-systems.fr <http://www.tranquil-it-systems.fr>
>>
>>
>>
> --
> Denis Cardon
> Tranquil IT Systems
> Les Espaces Jules Verne, bâtiment A
> 12 avenue Jules Verne
> 44230 Saint Sébastien sur Loire
> tel : +33 (0) 2.40.97.57.55
> http://www.tranquil-it-systems.fr
>
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba