I have a server that is not replicating correctly, but passes all the tests
listed here: https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC
In particular running
# host -t CNAME 976c9c86-288d-483e-baec-7043a9c4a6cd._msdcs.ncs.k12.de.us
976c9c86-288d-483e-baec-7043a9c4a6cd._msdcs.ncs.k12.de.us is an alias for
ncssamba2.ncs.k12.de.us.
returns correct information on all DCs.
However, the command samba-tool drs showrepl shows that for the above server,
replication fails when run on ncssamba1.
e.g.
CN=Schema,CN=Configuration,DC=ncs,DC=k12,DC=de,DC=us
Default-First-Site-Name\NCSSAMBA2 via RPC
DSA object GUID: 976c9c86-288d-483e-baec-7043a9c4a6cd
Last attempt @ Mon Aug 26 21:23:29 2013 EDT failed, result 87
(WERR_INVALID_PARAM)
386 consecutive failure(s).
Last success @ NTTIME(0)
but running the same command on ncssamba2 (the server in question)
CN=Schema,CN=Configuration,DC=ncs,DC=k12,DC=de,DC=us
Default-First-Site-Name\NCSSAMBA1 via RPC
DSA object GUID: 0bd99af6-a59f-4143-a56d-dae3dd6c2fd5
Last attempt @ Mon Aug 26 21:05:11 2013 EDT was successful
0 consecutive failure(s).
Last success @ Mon Aug 26 21:05:11 2013 EDT
So, ncssamba2 can initiate replication with ncssamba 1 and succeeds, but
ncssamba1 cannot initiate replication with ncssamba2?
Decided to try and demote the server:
# samba-tool domain demote -UAdministrator
Using ncssamba1.ncs.k12.de.us as partner server for the demotion
Password for [NEWARKCHARTER\Administrator]:
Desactivating inbound replication
Asking partner server ncssamba1.ncs.k12.de.us to synchronize from us
Error while demoting, re-enabling inbound replication
ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a
DsReplicaSync for partion CN=Schema,CN=Configuration,DC=ncs,DC=k12,DC=de,DC=us
- drsException: DsReplicaSync failed (87, 'WERR_INVALID_PARAM')
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
line 647, in run
sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part),
drsuapi.DRSUAPI_DRS_WRIT_REP)
File "/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py", line
83, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)
I also tried deleting through ADUC which does not work either. I get the error
about an invalid module. I've searched the mailing and haven't found an answer.
How can I fix this? I need to either get replication working for all servers
with this server, or delete this server from the domain and start over.
Sincerely,
Dave Hopkins
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
