Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Samba] How to fix --cross-ncs errors

306 views
Skip to first unread message

James

unread,
Oct 22, 2014, 12:11:56 PM10/22/14
to
Hello,

Running #'samba-tool dbcheck --cross-ncs --fix' gives me a handful
of errors that are unable to fix automatically. Samba attempts to
rename entries but fails. Is there a way to quickly veiw the failed
results without running this command again? Can these errors be fixed
manually? Thanks.

--
-James

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Daniel Fenert

unread,
Oct 22, 2014, 12:38:31 PM10/22/14
to
W dniu 2014-10-22 o 18:10, James pisze:
> Hello,
>
> Running #'samba-tool dbcheck --cross-ncs --fix' gives me a handful
> of errors that are unable to fix automatically. Samba attempts to
> rename entries but fails. Is there a way to quickly veiw the failed
> results without running this command again? Can these errors be fixed
> manually? Thanks.
>

Problem after upgrade?

Look at my post from few days ago:
https://lists.samba.org/archive/samba/2014-October/185984.html

ps. You should write at least version of your samba and what errors you
get :)

James

unread,
Oct 23, 2014, 8:18:46 AM10/23/14
to
Hi Daniel,

Upgraded from 4.11. to 4.13 last night. After running the
--cross-ncs --fix I receive several of the following errors.

ERROR: wrong
dn[DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
name='HP57\nDEL:180d6b3b-55b5-46e1-9a91-94870a250438'
new_dn[DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
Rename DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local to
DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local? [y/N/all/none]

Failed to rename object
DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local into
DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local : (64, 'objectclass:
structural objectClass dnsNode is not a valid child class for CN=Deleted
Objects,DC=DomainDnsZones,DC=mydomain,DC=local')




On 10/22/2014 12:37 PM, Daniel Fenert wrote:
> W dniu 2014-10-22 o 18:10, James pisze:
>> Hello,
>>
>> Running #'samba-tool dbcheck --cross-ncs --fix' gives me a handful
>> of errors that are unable to fix automatically. Samba attempts to
>> rename entries but fails. Is there a way to quickly veiw the failed
>> results without running this command again? Can these errors be fixed
>> manually? Thanks.
>>
> Problem after upgrade?
>
> Look at my post from few days ago:
> https://lists.samba.org/archive/samba/2014-October/185984.html
>
> ps. You should write at least version of your samba and what errors you
> get :)
>

--
-James

Achim Gottinger

unread,
Oct 23, 2014, 8:33:45 AM10/23/14
to
Hi James,

You may try to delete this entry with this syntax

ldbdel -H /var/lib/samba/private/sam.ldb
"<GUID=180d6b3b-55b5-46e1-9a91-94870a250438>"

It's an Deleted Object causing the error, so not used at the moment.

Had an similar issue few weeks back and fixed the cross-ncs errors by
removing the objects on all my dc's afterwards dbcheck's passed clean.

achim~

James

unread,
Oct 23, 2014, 8:58:32 AM10/23/14
to
Achim,

Thanks for the syntax. Should Samba be stopped before removing
entries from sam.lbd? After --cross-ncs --fix finishes I get the following.

Checked 114889 objects (28 errors)

Any way to review these 28 errors that would not automatically fix with
'samba-tool dbcheck -v --cross-ncs --fix'? Are these errors logged
somewhere? Maybe if I increase the log level for Samba and grep them out?
-James

Achim Gottinger

unread,
Oct 23, 2014, 9:19:05 AM10/23/14
to
You need the GUID's for alle the objects causing errors and delete them
manual.
In your exmaple below the DC is
DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438 and the part after
the ":" is the GUID for that object.

I used the command with samba stopped but it should work while running.
Best make an backup from samba before you start trying.

Andrew Bartlett

unread,
Oct 31, 2014, 6:29:52 AM10/31/14
to
On Thu, 2014-10-23 at 08:17 -0400, James wrote:
> Hi Daniel,
>
> Upgraded from 4.11. to 4.13 last night. After running the
> --cross-ncs --fix I receive several of the following errors.
>
> ERROR: wrong
> dn[DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
> name='HP57\nDEL:180d6b3b-55b5-46e1-9a91-94870a250438'
> new_dn[DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local]
> Rename DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local to
> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local? [y/N/all/none]
>
> Failed to rename object
> DC=HP57\0ACNF:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local into
> DC=HP57\0ADEL:180d6b3b-55b5-46e1-9a91-94870a250438,CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local : (64, 'objectclass:
> structural objectClass dnsNode is not a valid child class for CN=Deleted
> Objects,DC=DomainDnsZones,DC=mydomain,DC=local')

That is a very interesting bug. I'm not sure it is actually wrong to
have a conflict record there, and deleting it would seem to just be
making things worse - it got there for some reason.

It is also harmless, so I wouldn't worry too much until we can fix up
dbcheck. I may be back in contact for some details of the DB so I can
improve the test.

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba

James

unread,
Oct 31, 2014, 7:59:51 AM10/31/14
to
Andrew,

I chose not to delete the entries as they appeared harmless. These
also existed prior to the update. Everything appears to function as
intended.
-James

Achim Gottinger

unread,
Oct 31, 2014, 9:01:45 AM10/31/14
to
In my case the error looked like this

Checking 20970 objects
ERROR: wrong
dn[DC=client\0ACNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted
Objects,DC=DomainDnsZones,DC=...]
dc='client\nCNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9'
name='client\nDEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9'
new_dn[DC=client\0ADEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted
Objects,DC=DomainDnsZones,DC=...]
Not renaming
DC=client\0ACNF:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted
Objects,DC=DomainDnsZones,DC=... to
DC=client\0ADEL:ce76b285-0ade-444b-b08c-e8b2f7c9fcf9,CN=Deleted
Objects,DC=DomainDnsZones,DC=...
Please use --fix to fix these errors
Checked 20970 objects (1 errors)

I suspect it caused samba daemons to stop on my four addc servers
repeatedly after an service uptime of an few days. After i had removed
the entry with ldbdel on all server they got back to run stable.

achim~

Achim Gottinger

unread,
Oct 31, 2014, 9:07:30 AM10/31/14
to
This post had hepled me understand the issue back then

http://ourwinblog.blogspot.de/2011/05/resolving-computer-object-replication.html
0 new messages