Replication issue (maybe due to 4.7.0 bug?)

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
Hi,


We are facing to a replication issue on a couple of DC. We are now on 4.7.3 but we have been on 4.7.0 and 4.7.1 shortly


We have a replication issue (samba-tool ldapcmp shows errors). But when trying to full sync we also get errors :



[root@dc ~]# samba-tool drs replicate nas dc DC=ads,DC=dom,DC=be --full-sync
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
ldb_wrap open of secrets.ldb
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Using binding ncacn_ip_tcp:nas[,seal]
Mapped to DCERPC endpoint 135
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20>
Mapped to DCERPC endpoint 1024
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20>
Received smb_krb5 packet of length 250
Received smb_krb5 packet of length 1279
Received smb_krb5 packet of length 1294
Received smb_krb5 packet of length 1312
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
added interface eth0 ip=10.17.253.167 bcast=10.17.253.255 netmask=255.255.255.128
resolve_lmhosts: Attempting lmhosts lookup for name nas<0x20>
Received smb_krb5 packet of length 1294
Received smb_krb5 packet of length 1312
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (58, 'WERR_BAD_NET_RESP')
File "/usr/lib64/python2.7/site-packages/samba/netcmd/drs.py", line 386, in run
drs_utils.sendDsReplicaSync(server_bind, server_bind_handle, source_dsa_guid, NC, req_options)
File "/usr/lib64/python2.7/site-packages/samba/drs_utils.py", line 85, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)






and on the destination server, in the logs :



==> /var/log/samba/log.samba <==
[2017/12/07 10:10:55.825907, 0] ../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_apply_changes_trigger)
Failed to commit objects: WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE




I can't find what is causing this error and the error message doesnt give a lot of informations


Do you have any idea ?


Thanks !
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
On Thu, 2017-12-07 at 10:33 +0100, Gaetan SLONGO via samba wrote:
>
> I can't find what is causing this error and the error message doesnt give a lot of informations
>
>
> Do you have any idea ?

You will get more information if you turn up the log level, eg with
'log level = drs_repl:4'.  Take care before posting any logs that you
don't just reply and post them to this PUBLIC MAILING LIST until you
have checked them for private details, like staff names.

Typically the failure is due to the last object, so the end of the log
is the most useful bit.  I have to say all this because sadly folks
have posted private/secret details here before while hoping for help.

Thanks,

Andrew Bartlett

--
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
Hi Andrew,


Thank you for your answer.


Don't have much more informations with these logs :



==> /var/log/samba/log.samba <==
[2017/12/07 12:10:58.989255, 2] ../source4/rpc_server/drsuapi/getncchanges.c:1731(getncchanges_collect_objects)
../source4/rpc_server/drsuapi/getncchanges.c:1731: getncchanges on DC=ads,DC=dom,DC=be using filter (uSNChanged>=1)
[2017/12/07 12:10:59.058507, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:10:59.058543, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:10:59.058872, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00200064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 133/515) 0 links (done 0/3 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:10:59.539253, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:10:59.539286, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:10:59.539602, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 266/515) 0 links (done 0/63 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:11:00.078386, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:11:00.078420, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:11:00.078732, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 399/515) 0 links (done 0/183 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:11:00.716327, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:11:00.716372, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:11:00.724476, 2] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 116 objects (done 515/515) 575 links (done 575/575 (as S-1-5-21-2122692405-1923390809-3425158908-11157))






These are dropped in the logs from the source when throwing replicate (samba-tool). On the other side logs are the same as the first mail


Thanks !


----- Mail original -----

De: "Andrew Bartlett" <[hidden email]>
À: "Gaetan SLONGO" <[hidden email]>, [hidden email]
Envoyé: Jeudi 7 Décembre 2017 11:35:20
Objet : Re: [Samba] Replication issue (maybe due to 4.7.0 bug?)

On Thu, 2017-12-07 at 10:33 +0100, Gaetan SLONGO via samba wrote:
>
> I can't find what is causing this error and the error message doesnt give a lot of informations
>
>
> Do you have any idea ?

You will get more information if you turn up the log level, eg with
'log level = drs_repl:4'. Take care before posting any logs that you
don't just reply and post them to this PUBLIC MAILING LIST until you
have checked them for private details, like staff names.

Typically the failure is due to the last object, so the end of the log
is the most useful bit. I have to say all this because sadly folks
have posted private/secret details here before while hoping for help.

Thanks,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/ 
Authentication Developer, Samba Team http://samba.org 
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba 




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
Hi Andrew.

Any idea to solve this ?


Thanks

----- Mail original -----

De: "Gaetan SLONGO via samba" <[hidden email]>
À: "Andrew Bartlett" <[hidden email]>
Cc: [hidden email]
Envoyé: Jeudi 7 Décembre 2017 12:16:27
Objet : Re: [Samba] Replication issue (maybe due to 4.7.0 bug?)

Hi Andrew,


Thank you for your answer.


Don't have much more informations with these logs :



==> /var/log/samba/log.samba <==
[2017/12/07 12:10:58.989255, 2] ../source4/rpc_server/drsuapi/getncchanges.c:1731(getncchanges_collect_objects)
../source4/rpc_server/drsuapi/getncchanges.c:1731: getncchanges on DC=ads,DC=dom,DC=be using filter (uSNChanged>=1)
[2017/12/07 12:10:59.058507, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:10:59.058543, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:10:59.058872, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00200064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 133/515) 0 links (done 0/3 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:10:59.539253, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:10:59.539286, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:10:59.539602, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 266/515) 0 links (done 0/63 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:11:00.078386, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:11:00.078420, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:11:00.078732, 4] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 133 objects (done 399/515) 0 links (done 0/183 (as S-1-5-21-2122692405-1923390809-3425158908-11157))
[2017/12/07 12:11:00.716327, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2822(dcesrv_drsuapi_DsGetNCChanges)
UpdateRefs on getncchanges for 8dcda717-56de-4ad9-a2e5-fa3d539bfa21
[2017/12/07 12:11:00.716372, 4] ../source4/rpc_server/drsuapi/updaterefs.c:209(drsuapi_UpdateRefs)
DsReplicaUpdateRefs for host '8dcda717-56de-4ad9-a2e5-fa3d539bfa21._msdcs.ads.dom.be' with GUID 8dcda717-56de-4ad9-a2e5-fa3d539bfa21 options 0x00000007 nc=<GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be
[2017/12/07 12:11:00.724476, 2] ../source4/rpc_server/drsuapi/getncchanges.c:3006(dcesrv_drsuapi_DsGetNCChanges)
DsGetNCChanges with uSNChanged >= 1 flags 0x00000064 on <GUID=e88a2ac0-86a7-4e80-b2f0-832e165702d3>;<SID=S-1-5-21-2122692405-1923390809-3425158908>;DC=ads,DC=dom,DC=be gave 116 objects (done 515/515) 575 links (done 575/575 (as S-1-5-21-2122692405-1923390809-3425158908-11157))






These are dropped in the logs from the source when throwing replicate (samba-tool). On the other side logs are the same as the first mail


Thanks !


----- Mail original -----

De: "Andrew Bartlett" <[hidden email]>
À: "Gaetan SLONGO" <[hidden email]>, [hidden email]
Envoyé: Jeudi 7 Décembre 2017 11:35:20
Objet : Re: [Samba] Replication issue (maybe due to 4.7.0 bug?)

On Thu, 2017-12-07 at 10:33 +0100, Gaetan SLONGO via samba wrote:
>
> I can't find what is causing this error and the error message doesnt give a lot of informations
>
>
> Do you have any idea ?

You will get more information if you turn up the log level, eg with
'log level = drs_repl:4'. Take care before posting any logs that you
don't just reply and post them to this PUBLIC MAILING LIST until you
have checked them for private details, like staff names.

Typically the failure is due to the last object, so the end of the log
is the most useful bit. I have to say all this because sadly folks
have posted private/secret details here before while hoping for help.

Thanks,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/ 
Authentication Developer, Samba Team http://samba.org 
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba 




--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba 



--




www.it-optics.com
       
Gaëtan SLONGO | Head of Infrastructure Department
Boulevard Initialis, 28 - 7000 Mons, BELGIUM
Company : +32 (0)65 84 23 85
Direct : +32 (0)65 32 85 88
Fax : +32 (0)65 84 66 76
Skype ID : gslongo.pro
GPG Key : gslongo-gpg_key.asc
       

- Please consider your environmental responsibility before printing this e-mail -








--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
On Wed, 2017-12-13 at 11:37 +0100, Gaetan SLONGO wrote:
> Hi Andrew.
>
> Any idea to solve this ?

You need to turn up the logs on the destination server until you get
more useful log entries leading up to:


==> /var/log/samba/log.samba <== 
[2017/12/07 10:10:55.825907, 0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_ap
ply_changes_trigger) 
Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE 

I hope this helps,

Andrew Bartlett

--
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
Hi Andrew,


By increasing global logs (not only drs) I get this : Failed to apply records: ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3643: Failed to remove backlink of msDS-RevealedDSAs when deleting CN=DMZRODC




Full log for this object :





[2017/12/14 11:37:14.755054, 4] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5439(replmd_replicated_apply_search_callback)
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5439: Keeping object CN=DMZRODC-0,CN=Computers,DC=ads,DC=dom,DC=be at under 49274c43-0329-4dd0-a186-038eff5edbc6 and rejecting older rename to CN=DMZRODC-0,CN=Deleted Objects,DC=ads,DC=dom,DC=be under 05c83531-5690-445f-ba94-929fd7b0a6d5
[2017/12/14 11:37:14.755187, 4] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5248(replmd_replicated_apply_merge)
[2017/12/14 11:37:14.760329, 4] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:5254(replmd_replicated_apply_merge)
Final DRS replication modify message of 85db3043-52dc-4203-8d96-aeb7371f7446:
dn: CN=DMZRODC-0,CN=Computers,DC=ads,DC=dom,DC=be
changetype: modify
replace: whenChanged
whenChanged: 20171206113122.0Z
-
replace: displayName
-
replace: isDeleted
isDeleted: TRUE
-
replace: uSNChanged
uSNChanged: 13533
-
replace: replPropertyMetaData
replPropertyMetaData:: AQAAAAAAAAAeAAAAAAAAAAAAAAABAAAA7V84EAMAAAC4FHYcwlV1TLs
SH1TidxmAojUAAAAAAAAFHgAAAAAAAAMAAAADAAAASYw5EAMAAADAkzWRgMedRpeCVlj9YC31PB4A
AAAAAAA8HgAAAAAAAAEAAgABAAAA7V84EAMAAAC4FHYcwlV1TLsSH1TidxmAojUAAAAAAAAFHgAAA
AAAAAIAAgABAAAA7V84EAMAAAC4FHYcwlV1TLsSH1TidxmAojUAAAAAAAAFHgAAAAAAAA0AAgACAA
AACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAADAAAgABAAAACmY4EAMAAAC
4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAABkBAgABAAAA7V84EAMAAAC4FHYcwlV1TLsS
H1TidxmAojUAAAAAAAAFHgAAAAAAAAEACQAFAAAAtIw5EAMAAADWhGZyqF1TSJHxYWTRwL7rBR8AA
AAAAABAHgAAAAAAAAgACQAEAAAAY2U4EAMAAADWhGZyqF1TSJHxYWTRwL7r5R4AAAAAAAAiHgAAAA
AAABAACQACAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAABkACQACAAA
ACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAADcACQACAAAA7V84EAMAAAC4
FHYcwlV1TLsSH1TidxmArDUAAAAAAAAFHgAAAAAAAEAACQABAAAA7V84EAMAAAC4FHYcwlV1TLsSH
1TidxmAojUAAAAAAAAFHgAAAAAAAFoACQADAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAA
AAAADdNAAAAAAAAF4ACQACAAAA7V84EAMAAAC4FHYcwlV1TLsSH1TidxmArDUAAAAAAAAFHgAAAAA
AAGAACQADAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAGIACQADAAAA
CmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAH0ACQACAAAACmY4EAMAAAC4F
HYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAJIACQABAAAA7V84EAMAAAC4FHYcwlV1TLsSH1
TidxmAojUAAAAAAAAFHgAAAAAAAJ8ACQACAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAA
AAADdNAAAAAAAAKAACQACAAAA7V84EAMAAAC4FHYcwlV1TLsSH1TidxmArDUAAAAAAAAFHgAAAAAA
AN0ACQABAAAA7V84EAMAAAC4FHYcwlV1TLsSH1TidxmAojUAAAAAAAAFHgAAAAAAAC4BCQACAAAAC
mY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAGsCCQABAAAA7V84EAMAAAC4FH
YcwlV1TLsSH1TidxmAojUAAAAAAAAFHgAAAAAAAAMDCQADAAAACmY4EAMAAAC4FHYcwlV1TLsSH1T
idxmAvTUAAAAAAADdNAAAAAAAAA0DCQABAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAA
AADdNAAAAAAAAA4DCQACAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAA
GQDCQADAAAACmY4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAKAGCQACAAAACm
Y4EAMAAAC4FHYcwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAAoICQABAAAACmY4EAMAAAC4FHY
cwlV1TLsSH1TidxmAvTUAAAAAAADdNAAAAAAAAA==
-
replace: codePage
-
replace: countryCode
-
replace: unicodePwd
-
replace: pwdLastSet
-
replace: primaryGroupID
-
replace: supplementalCredentials
-
replace: accountExpires
-
replace: sAMAccountType
-
replace: servicePrincipalName
-
replace: lastKnownParent
lastKnownParent: <GUID=49274c43-0329-4dd0-a186-038eff5edbc6>;CN=Computers,DC=a
ds,DC=dom,DC=be
-
replace: objectCategory
-
replace: isCriticalSystemObject
-
replace: lastLogonTimestamp
-
replace: isRecycled
isRecycled: TRUE
-


[2017/12/14 11:37:14.764603, 1] ../source4/dsdb/repl/replicated_objects.c:890(dsdb_replicated_objects_commit)
Failed to apply records: ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3643: Failed to remove backlink of msDS-RevealedDSAs when deleting CN=DMZRODC-0,CN=Computers,DC=ads,DC=dom,DC=be: (null): Operations error






Thanks !
----- Mail original -----

De: "Andrew Bartlett" <[hidden email]>
À: "Gaetan SLONGO" <[hidden email]>
Cc: [hidden email]
Envoyé: Mercredi 13 Décembre 2017 20:04:36
Objet : Re: [Samba] Replication issue (maybe due to 4.7.0 bug?)

On Wed, 2017-12-13 at 11:37 +0100, Gaetan SLONGO wrote:
> Hi Andrew.
>
> Any idea to solve this ?

You need to turn up the logs on the destination server until you get
more useful log entries leading up to:


==> /var/log/samba/log.samba <==
[2017/12/07 10:10:55.825907, 0]
../source4/dsdb/repl/drepl_out_helpers.c:942(dreplsrv_op_pull_source_ap
ply_changes_trigger)
Failed to commit objects:
WERR_GEN_FAILURE/NT_STATUS_INVALID_NETWORK_RESPONSE

I hope this helps,

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/ 
Authentication Developer, Samba Team http://samba.org 
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba 




--




www.it-optics.com
       
Gaëtan SLONGO | Head of Infrastructure Department
Boulevard Initialis, 28 - 7000 Mons, BELGIUM
Company : +32 (0)65 84 23 85
Direct : +32 (0)65 32 85 88
Fax : +32 (0)65 84 66 76
Skype ID : gslongo.pro
GPG Key : gslongo-gpg_key.asc
       

- Please consider your environmental responsibility before printing this e-mail -








--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Replication issue (maybe due to 4.7.0 bug?)

Samba - General mailing list
On Thu, 2017-12-14 at 11:40 +0100, Gaetan SLONGO wrote:
> Hi Andrew,
>
> By increasing global logs (not only drs) I get this : Failed to apply records: ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3643: Failed to remove backlink of msDS-RevealedDSAs when deleting CN=DMZRODC

This is bug
https://bugzilla.samba.org/show_bug.cgi?id=13095
and
https://bugzilla.samba.org/show_bug.cgi?id=13120

This is fixed in 4.7's git repo, and it just waiting for a release.

Sorry,

Andrew Bartlett
--
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba