[Samba] drs showrepl failures

[Wayne Merricks]

Hi all,

I've been having DNS issues for about 3 months which is causing all
sorts of weird problems (most things work fine but then we have days
where random machines lose trust/can't login without un-joining and
rejoining the domain). The domain was working with no problems for
nearly 5 months before this started happening.

I have Ubuntu 14.04 running Samba 4.1.6 using the internal Samba DNS.
As a test (because I couldn't think of anything else to try), I also set
up a temporary DC with a source build of the current stable samba 4.3.4.

If I run samba-tool drs showrepl under Samba 4.1.6 I get errors like this:
* In and Outbound Neighbors: "failed, result 121 (WERR_SEM_TIMEOUT)" or
"failed, result 2 (WERR_BADFILE)
* KCC Connection Objects: Seems OK.

If I run it on Samba 4.3.4:
* Outbound neighbours and KCC seem OK, only Inbound has errors

Could anyone tell me where I should be looking to resolve this as I've
exhausted Google of useful results. My current plan is to update to
Samba 4.3.4 however I'm curious why showrepl is failing before proceeding.

Cheers,

Wayne



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[mathias dufresne]

Hi Wayne,

Joining a new DC to a Samba AD domain most generally (for me at least) is
generating issue in showrepl.
To solve that you can try to reboot 1° FSMO owner 2° newly joined DC
Another option, which has my preference, is to force replication in both
ways:
1° FSMO replicate to newly joined DC
2° newly joined replicate on FSMO

For small DB this is quiet fast...

Forcing replication is done here using the following piece of shell code:
----------------------------------------------------------------
# First replicate $fsmo_owner to $localhost
for DIT in `ls $sam.d | grep -v metadata.tdb | sed -e s/.ldb$//`
do
echo $DIT
samba-tool drs replicate $hostname $fsmo_owner $DIT
done
# Then replicate $localhost to $fsmo_owner
for DIT in `ls $sam.d | grep -v metadata.tdb | sed -e s/.ldb$//`
do
echo $DIT
samba-tool drs replicate $fsmo_owner $hostname $DIT
done
----------------------------------------------------------------

Where fsmo_owner contains IP or hostname of FSMO owner and localhost is IP
or hostname of localhost.

Cheers,

mathias