Alex- A few things:
1) Don't run DCs on the same domain with different versions of Samba. Either add in another 4.0.1 DC and replicate, or use the backup tool to create a copy of the database first. 2) CN=DeletedObjects is hidden by design. You can view it using ldp.exe on a windows box (http://technet.microsoft.com/en-us/library/cc978013.aspx) and a google search will show you where to look for it in ASDIEdit. 3) In this instance, I see why you are trying to delete this item; in 99% of other cases though, the tombstone policy should take care of removing deleted objects. Good luck, Mike Ray ----- Original Message ----- From: "Alex Ferrara" <[email protected]> To: "[email protected] List" <[email protected]> Sent: Sunday, August 4, 2013 3:03:11 PM Subject: Re: [Samba] Joining DC Does nobody know how to manually remove items from Samba4 directory? I've tried using adsiedit but cn=deleted items doesn't show up. Sent from my iPhone On 02/08/2013, at 1:58 PM, Alex Ferrara <[email protected]> wrote: > I am having some trouble joining a new samba4 server as a DC. I am pretty > sure this stems from trying to use OpenChange and subsequently removing it. > The new samba4 machine is running 4.0.7 and the existing is running 4.0.1. I > am a little hesitant to do an in-place upgrade of the last working DC, so I > wanted a replica to fall back on in case things go bad. > > Any help would be appreciated. > > On the new machine > >> samba-tool domain join domain.local DC -Uadministrator realm=domain.local >> --dns-backend=BIND9_DLZ > > Finding a writeable DC for domain 'domain.local' > Found DC tachyon.domain.local > Password for [DOMAIN\administrator]: > workgroup is DOMAIN > realm is domain.local > checking sAMAccountName > Adding CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local > Adding > CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local > > Adding CN=NTDS > Settings,CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local > > Adding SPNs to CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local > Setting account password for NEXUS$ > Enabling account > Calling bare provision > No IPv6 address will be assigned > Provision OK for domain DN DC=domain,DC=local > Starting replication > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[402/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[804/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1206/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[1608/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2010/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2412/2620] > linked_values[0/0] > Schema-DN[CN=Schema,CN=Configuration,DC=domain,DC=local] objects[2620/2620] > linked_values[0/0] > Analyze and apply schema objects > Join failed - cleaning up > checking sAMAccountName > Deleted CN=NEXUS,OU=Domain Controllers,DC=domain,DC=local > Deleted CN=NTDS > Settings,CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local > > Deleted > CN=NEXUS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local > > ERROR(runtime): uncaught exception - (8442, 'WERR_DS_DRA_INTERNAL_ERROR') > File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, > in _run > return self.run(*args, **kwargs) > File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 552, in > run > machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend) > File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1104, in join_DC > ctx.do_join() > File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1009, in do_join > ctx.join_replicate() > File "/usr/lib/python2.7/dist-packages/samba/join.py", line 734, in > join_replicate > replica_flags=ctx.replica_flags) > File "/usr/lib/python2.7/dist-packages/samba/drs_utils.py", line 248, in > replicate > (level, ctr) = self.drs.DsGetNCChanges(self.drs_handle, req_level, req) > > On the existing DC logs > > [2013/08/02 13:53:04, 0] > ../source4/rpc_server/drsuapi/getncchanges.c:220(get_nc_changes_build_object) > ../source4/rpc_server/drsuapi/getncchanges.c:220: Failed to find attribute in > schema for attrid 2786216 mentioned in replPropertyMetaData of CN=Recipient > Update Service (DOMAIN)\0ADEL:cbf078d9-a0ff-4609-a05b-743816af619d,CN=Deleted > Objects,CN=Configuration,DC=domain,DC=local > > Alex Ferrara > Director > Receptive IT Solutions > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
