[Samba] Replication Ok, or not?

Gregory Sloop

unread,

Feb 12, 2013, 12:20:02 PM2/12/13

to

Setup a DC using 4.0.3 - all appears to go fine...

Setup a second DC and everything works fine to here...but I'm not sure
if replication is actually working or not.

Here's what I get from ./samba-tool drs showrepl

I've also done. [./samba-tool drs kcc -Uadministrator
dc2.samba.somedom.local] in an attempt to fix the replication problem.
(or what I think is a problem.)

[The outbound neighbors data seems hinky... and searches on similar
cases don't seem to return much useful data.]

---
Default-First-Site-Name\DC1
DSA Options: 0x00000001
DSA object GUID: b895f491-759f-4c72-a068-d1a40d0a8f4a
DSA invocationId: e72417ee-e57b-430f-b636-1d3745a94c89

==== INBOUND NEIGHBORS ====

DC=ForestDnsZones,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ Tue Feb 12 09:10:15 2013 PST was successful
0 consecutive failure(s).
Last success @ Tue Feb 12 09:10:15 2013 PST

DC=DomainDnsZones,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ Tue Feb 12 09:10:16 2013 PST was successful
0 consecutive failure(s).
Last success @ Tue Feb 12 09:10:16 2013 PST

DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ Tue Feb 12 09:10:17 2013 PST was successful
0 consecutive failure(s).
Last success @ Tue Feb 12 09:10:17 2013 PST

CN=Schema,CN=Configuration,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ Tue Feb 12 09:10:17 2013 PST was successful
0 consecutive failure(s).
Last success @ Tue Feb 12 09:10:17 2013 PST

CN=Configuration,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ Tue Feb 12 09:10:18 2013 PST was successful
0 consecutive failure(s).
Last success @ Tue Feb 12 09:10:18 2013 PST

==== OUTBOUND NEIGHBORS ====

DC=ForestDnsZones,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

DC=DomainDnsZones,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

CN=Configuration,DC=samba,DC=somedom,DC=local
Default-First-Site-Name\DC2 via RPC
DSA object GUID: 6c05f6d6-0626-494a-8192-9d574a99cc34
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection --
Connection name: 6c662086-56f8-4932-aead-3ecf580e705e
Enabled : TRUE
Server DNS name : DC2.samba.somedom.local
Server DN name : CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=somedom,DC=local
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Ricky Nance

unread,

Feb 12, 2013, 12:40:02 PM2/12/13

to

I think that is just a bug. Not sure if its been reported yet or not though.

Ricky

Michael Ray

unread,

Feb 12, 2013, 1:10:02 PM2/12/13

to

I just set-up replication this morning and saw a similar situation.
I tested it by simply turning off my PDC and seeing what happened -- and everything worked just fine.
I then also added a new user to this alternate DC, brought up the PDC, killed the alternate DC after a minute, and checked to see if I could find the new user in the db. And sure enough, the user was there.

https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC#Testing_Directory_Replication

^ Gives a few ideas for testing replication and communication between DCs, but the output of your drs showrepl looks fine to my (admittedly inexperienced) eyes.

As far as the NC error, I also saw that and found this: http://lists.samba.org/archive/samba-technical/2011-November/080379.html

TL;DR: it's probably nothing -- if the tests for replication work, don't worry much about it.
----- Original Message -----