[Samba] Domain demote fails

[Jochen Wezel - CompuMaster GmbH]

Hi together,

Demoting from a Win-Server-Based Active Directory fails

root@srvf01:~# samba-tool domain demote --server windc-server -UAdministrator
Using srv15.lan.compumaster.de as partner server for the demotion
Password for [COMPUMASTER\Administrator]:
Desactivating inbound replication
Asking partner server windc-server to synchronize from us
Error while demoting, re-enabling inbound replication
ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a DsReplicaSync for partion CN=Schema,CN=Configuration,DC=xxxxx - drsException: DsReplicaSync failed (1727, 'WERR_RPC_S_CALL_FAILED_DNE')
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line 647, in run
sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part), drsuapi.DRSUAPI_DRS_WRIT_REP)
File "/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)

Regards
Jochen
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Jochen Wezel - CompuMaster GmbH]

Hi together,

Trying to demote from our existing Windows-based Active directory domain results in following problem.
The ex-windc machine was a DC a few years ago - but currently it isn't any more. But the DC sever lookup mechanism identifies it incorrectly as an active DC :-(

root@srvf01:~# samba-tool domain demote -UAdministrator
Using ex-windc as partner server for the demotion
ERROR(<class 'samba.drs_utils.drsException'>): uncaught exception - drsException: DRS connection to SRV14.lan.compumaster.de failed: (-1073741249, 'NT_STATUS_PORT_UNREACHABLE')
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run
return self.run(*args, **kwargs)
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line 628, in run
(drsuapiBind, drsuapi_handle, supportedExtensions) = drsuapi_connect(server, lp, creds)
File "/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py", line 54, in drsuapi_connect
raise drsException("DRS connection to %s failed: %s" % (server, e))

Best Regards

[Jochen Wezel - CompuMaster GmbH]

I've found the old entry using MS ADS Locations & Services administration tool and removed it



1. So this issue regarding finding of old DCs by Samba is closed.

2. Still open is the very 1st issue:

Hi together,



Demoting from a Win-Server-Based Active Directory fails

root@srvf01:~# samba-tool domain demote --server windc-server -UAdministrator Using windc.mydomain.com as partner server for the demotion Password for [MYDOMAIN\Administrator]:

Desactivating inbound replication

Asking partner server windc-server to synchronize from us Error while demoting, re-enabling inbound replication ERROR(<class 'samba.drs_utils.drsException'>): Error while sending a DsReplicaSync for partion CN=Schema,CN=Configuration,DC=xxxxx - drsException: DsReplicaSync failed (1727, 'WERR_RPC_S_CALL_FAILED_DNE')

File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line 647, in run

sendDsReplicaSync(drsuapiBind, drsuapi_handle, ntds_guid, str(part), drsuapi.DRSUAPI_DRS_WRIT_REP)

File "/usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py", line 83, in sendDsReplicaSync

raise drsException("DsReplicaSync failed %s" % estr)



Regards

Jochen

-----Ursprüngliche Nachricht-----
Von: Jochen Wezel - CompuMaster GmbH
Gesendet: Montag, 24. März 2014 13:01
An: 'sa...@lists.samba.org'
Betreff: AW: [Samba] Domain demote fails