Matthieu, I noted that the tombtoned objects left on the Windows server (172.16.100.27) are not in Delete Objects container. They are deleted server objects for DC ARES(Samba DC) that have FLAG_DISALLOW_MOVE_ON_DELETE set. I am wondering if it is due to a unsuccessful DC demotion in the past(http://support.microsoft.com/?id=216498) . Could you tell me the exact steps of your testing ? I assume that (1) you promoted a Samba to a DC and joined it to Windows DC, (2) then demoted the Samba DC, (3)then created and deleted some user group so there are some object deletion occurring. Please confirm.
Thanks! Hongwei -----Original Message----- From: cifs-protocol-boun...@cifs.org [mailto:cifs-protocol-boun...@cifs.org] On Behalf Of Matthieu Patou Sent: Friday, June 17, 2011 1:50 PM To: Edgar Olougouna Cc: p...@tridgell.net; cifs-proto...@samba.org Subject: Re: [cifs-protocol] [REG:111060858976134] Deleted object removal Hi Edgar, Do you have any news on this problem? Regards. Matthieu. On 08/06/2011 23:46, Edgar Olougouna wrote: > Matthieu, > > I am investigating this and will update you as soon as I have news. > > Regards, > Edgar > > -----Original Message----- > From: Bryan Burgin > Sent: Wednesday, June 08, 2011 11:26 AM > To: m...@samba.org; p...@tridgell.net; cifs-proto...@samba.org > Cc: MSSolve Case Email > Subject: [REG:111060858976134] Deleted object removal > > [dochelp to bcc] > [adding case number and case mail] > > Hi, Matthieu, > > Thank you for your question. I created case 111060858976134 to track this. > An engineer from the Protocol team will pick this up soon. > > Bryan > > -----Original Message----- > From: Matthieu Patou [mailto:m...@samba.org] > Sent: Wednesday, June 08, 2011 12:33 AM > To: Interoperability Documentation Help; p...@tridgell.net; > cifs-proto...@samba.org > Subject: Deleted object removal > > Hello doc help team, > > On a Windows 2008R2 server I joined and unjoined a Samba 4 domain controller > and created users and groups and then deleted them. > > As the recycle bin is not activated this has resulted to ~ 100 of deleted > objects. Most of this took place between march 2011 and mid may 2011. > With the default tombstonelifetime (180 days) the objects were not removed. > Then last saturday I changed this value to 10 days. > > ./bin/ldbsearch -H ldap://172.16.100.27 -U administrator%totoTATA321 > '(tombstonelifetime=*)' --show-deleted --cross-ncs tombstonelifetime # record > 1 > dn: CN=Directory Service,CN=Windows > NT,CN=Services,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > tombstoneLifetime: 10 > > # returned 1 records > # 1 entries > # 0 referrals > > Within a couple of hours most of the objects were removed, that's mostly what > I expected. Still I had the following ones: > > # record 1 > dn: > CN=ARES\0ADEL:6d4b237f-b7a8-4b34-ad25-61af76145272,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505155906.0Z > > # record 2 > dn: > CN=ARES\0ADEL:1757303b-6f90-434b-a3f7-215a92c2ecd5,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505164717.0Z > > # record 3 > dn: > CN=ARES\0ADEL:2e6bc9e6-a2cc-4d47-bfde-07a6fe649878,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505164200.0Z > > # record 4 > dn: > CN=ARES\0ADEL:91cf9b10-8e4c-4ea7-a46b-7cf32d5c9754,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505154845.0Z > > # record 5 > dn: > CN=ARES\0ADEL:197e888f-cbb2-4d15-9699-d91dc4cf370b,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110513094933.0Z > > # record 6 > dn: > CN=ARES\0ADEL:b037755f-5f4b-47af-9064-d50d82fbe757,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505160242.0Z > > # record 7 > dn: > CN=ARES\0ADEL:140a486c-430e-4a3c-9b6a-5df6914a2638,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505171053.0Z > > # record 8 > dn: > CN=ARES\0ADEL:c40d63c2-7045-4ea1-ab46-c0a5d6f203a9,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110513120439.0Z > > # record 9 > dn: > > CN=ARES\0ADEL:16df8618-cc2a-4969-9d75-9666cce09ade,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505164942.0Z > > # record 10 > dn: > CN=ARES\0ADEL:a894b564-2639-4940-a69a-09f37977c125,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505155924.0Z > > # record 11 > dn: > CN=ARES\0ADEL:48eb0e2d-7b1f-480a-bbcc-5047a2f00e69,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505160128.0Z > > # record 12 > dn: > CN=ARES\0ADEL:2800d082-75f6-417a-afb0-c83cba4274c8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=w2k8r2,DC=home,DC=matws,DC=net > whenChanged: 20110505161112.0Z > > > As they are older than 10 days I don't understand why they were not removed > right away. > Is there any explanation ? > > Matthieu. > > -- > Matthieu Patou > Samba Team http://samba.org > Private repo http://git.samba.org/?p=mat/samba.git;a=summary > > > > -- Matthieu Patou Samba Team http://samba.org Private repo http://git.samba.org/?p=mat/samba.git;a=summary _______________________________________________ cifs-protocol mailing list cifs-protocol@cifs.org https://lists.samba.org/mailman/listinfo/cifs-protocol _______________________________________________ cifs-protocol mailing list cifs-protocol@cifs.org https://lists.samba.org/mailman/listinfo/cifs-protocol