Tom, Not sure how many DCs you have (im assuming its not a 3 digit number)
If im understanding the prob correctly, you are suspecting to have a stale records somewhere in ntds.. Why not you work out the other way round - grab a list of your current DCs - resolve those GUID, and find out which of the dc guid is not there (something like that)... If its autogenerated - perhaps KCC manual trigger should takes care of the deleted dsa? Thank you and have a splendid day! Kind Regards, Freddy Hartono Windows Administrator (ADSM/NT Security) Spherion Technology Group, Singapore For Agilent Technologies E-mail: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Friday, April 08, 2005 10:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] GUID resolution I'm replying to my own post. I think this means this guid can't be found in AD? However, my DC keeps logging errors that it can't replicate with it. This has been going on for days. My DC must be getting the guid from somewhere, but where? any help would be great. thanks Kern, Tom wrote: > Even with the brackets and guid=, i get this error now- > > ldap_search_s(ld, "<guid=c47ca389-0832-41bc-8030-3e0c7fd13674>", 1, > "(objectclass=*)", NULL, 1, &msg) Error: Search: Referral. <10> > Result <10>: 0000202B: RefErr: DSID-03100698, data 0, 2 access points > ref 1: 'gc.ms-dcs.CSG-IT.NET:3268' > ref 2: 'gc._msdcs.CSG-IT.NET:3268' > > Matched DNs: > Getting 0 entries: > > Any idea what this means? > > Thanks > > > > > > > > > > > > > [EMAIL PROTECTED] wrote: >> You are missing the closing ">". >> >> Regarding the question on GUID binding syntax, 2K supports both octet >> string and "COM" GUID style with dashes. Just don't get them mixed >> up. The octet string is NOT the same as the COM GUID with no dashes. >> >> bcd3e267-50ff-4780-afd6-d1bb3785ada5 >> and >> 67E2D3BCFF508047AFD6D1BB3785ADA5 >> are equivalent. Note the change of byte order on the first DWORD >> and the first 2 WORDs. >> >> Also, you can search by GUID and use them in LDIF files (generally >> for creating schema with fixed schemaIDGUID): >> >> (objectGUID=\67\E2\D3\BC\FF\50\80\47\AF\D6\D1\BB\37\85\AD\A5) >> and >> Z+LTvP9QgEev1tG7N4WtpQ== >> For the Base64 that LDIF requires. >> >> With SID binding, 2003 supports SDDL format and octet string, but 2K >> supports octet string only. >> >> HTH, >> >> Joe K. >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom >> Sent: Thursday, April 07, 2005 5:55 PM >> To: ActiveDir@mail.activedir.org >> Subject: RE: [ActiveDir] GUID resolution >> >> I'm running win2k sp4 in mixed mode. >> heres the result i get from prepending "GUID"- >> >> ldap_search_s(ld, "<GUID=c47ca389-0832-41bc-8030-3e0c7fd13674", 1, >> "(objectclass=*)", attrList, 0, &msg) >> Error: Search: Invalid DN Syntax. <34> >> Result <34>: 0000208F: NameErr: DSID-031001AA, problem 2006 >> (BAD_NAME), data 8350, best match of: >> '<GUID=c47ca389-0832-41bc-8030-3e0c7fd13674' >> >> Matched DNs: >> Getting 0 entries: >> >> >> Thanks >> >> -----Original Message----- >> From: Dean Wells [mailto:[EMAIL PROTECTED] >> Sent: Thursday, April 07, 2005 5:54 PM >> To: Send - AD mailing list >> Subject: RE: [ActiveDir] GUID resolution >> >> >> I'm guessing you mean "octet string" ... if so and if I understand >> what you're asking, not really ... <GUID=> and <SID=> are little >> more than hard-coded bits of server-side intelligence ... am I even >> answering your question? >> >> -- >> Dean Wells >> MSEtechnology >> * Email: [EMAIL PROTECTED] >> http://msetechnology.com >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of David Cliffe >> Sent: Thursday, April 07, 2005 5:45 PM >> To: ActiveDir@mail.activedir.org >> Subject: RE: [ActiveDir] GUID resolution >> >> Seems you can also use that syntax <GUID=xxxx> as the argument to -b >> in ADFIND, which makes sense, and is nice to know. >> >> Is this because that attribute's syntax is an Octal string? I'm just >> curious...not knowing too much about the way these things are stored! >> >> Thanks! >> >> -DaveC >> Reuters CIO Infrastructure >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells >> Sent: Thursday, April 07, 2005 5:22 PM >> To: Send - AD mailing list >> Subject: RE: [ActiveDir] GUID resolution >> >> Noticed you said you're using 2K ... dashes are of no concern, at >> least to >> 2K3 ... don't have 2K directory handy to test right now. Either >> way, can't even remember if the <GUID=blah> base is supported on 2K >> ... >> assuming it is, you missed the <GUID= from the beginning of the >> entry. >> >> >> Dean Wells wrote: >>> 1. Run LDP >>> 2. Connect and BIND >>> 3. Select Search >>> 4. Enter Base DN of <GUID=[whatever the GUID is]> ... include >>> the angled brackets >>> 5. Populate other dialogs accordingly, enter and run >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> >> ----------------------------------------------------------------- >> Visit our Internet site at http://www.reuters.com >> >> To find out more about Reuters Products and Services visit >> http://www.reuters.com/productinfo >> >> Any views expressed in this message are those of the individual >> sender, except where the sender specifically states them to be the >> views of Reuters Ltd. >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> >> >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> >> This message is for the designated recipient only and may contain >> privileged, proprietary, or otherwise private information. If you >> have received it in error, please notify the sender immediately and >> delete the original. Any other use of the email by you is >> prohibited. List info : http://www.activedir.org/List.aspx >> List FAQ : http://www.activedir.org/ListFAQ.aspx >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
