Replilkationsfehler auf Backup (WERR_BAD_NET_RESP)

Hallo,

ich bekomme auf meinem Backup eine Replikationsfehler:

root@dc2:~# samba-tool drs showrepl
Default-First-Site-Name\DC2
DSA Options: 0x00000001
DSA object GUID: d157410d-5204-41f3-8ec0-65a95f83158a
DSA invocationId: c7ab0f56-921f-4342-915a-bc28ca6c9bb1

==== INBOUND NEIGHBORS ====

CN=Configuration,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ Wed Oct 21 13:01:01 2020 CEST was successful
0 consecutive failure(s).
Last success @ Wed Oct 21 13:01:01 2020 CEST

DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ Wed Oct 21 13:01:02 2020 CEST failed, result 58 (WERR_BAD_NET_RESP)
7602 consecutive failure(s).
Last success @ Wed Oct 21 13:01:02 2020 CEST

DC=ForestDnsZones,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ Wed Oct 21 13:01:00 2020 CEST was successful
0 consecutive failure(s).
Last success @ Wed Oct 21 13:01:00 2020 CEST

CN=Schema,CN=Configuration,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ Wed Oct 21 13:01:02 2020 CEST was successful
0 consecutive failure(s).
Last success @ Wed Oct 21 13:01:02 2020 CEST

DC=DomainDnsZones,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ Wed Oct 21 13:01:01 2020 CEST was successful
0 consecutive failure(s).
Last success @ Wed Oct 21 13:01:01 2020 CEST

==== OUTBOUND NEIGHBORS ====

CN=Configuration,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

DC=ForestDnsZones,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

CN=Schema,CN=Configuration,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

DC=DomainDnsZones,DC=xyz,DC=de
Default-First-Site-Name\DC via RPC
DSA object GUID: 3a2f0754-5471-49c8-91bc-a8e536effee5
Last attempt @ NTTIME(0) was successful
0 consecutive failure(s).
Last success @ NTTIME(0)

==== KCC CONNECTION OBJECTS ====

Connection –
Connection name: 1150517d-c2fe-4b92-81b9-9e3e819dfa15
Enabled : TRUE
Server DNS name : dc.xyz.de
Server DN name : CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=xyz,DC=de
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!

Auch

root@dc2:~# samba-tool drs replicate dc2.xyz.de dc.xyz.de CN=Configuration,DC=xyz,DC=de --full-sync

half nicht.

Im /var/log/samba/log.samba taucht alle 5 Minuten dies auf:

[2020/10/21 13:01:02.183628, 1, pid=10351] …/…/source4/dsdb/repl/drepl_out_helpers.c:752(dreplsrv_op_pull_retry_with_flags)
Missing parent object despite setting DRSUAPI_DRS_GET_ANC flag
[2020/10/21 13:01:02.183775, 0, pid=10351] …/…/source4/dsdb/repl/drepl_out_helpers.c:1030(dreplsrv_op_pull_source_apply_changes_trigger)
Failed to commit objects: WERR_DS_DRA_MISSING_PARENT/NT_STATUS_INVALID_NETWORK_RESPONSE

An welchen Schrauben muss ich drehen, damit die Warnung verschwindet?

Nachdem der Support einen Blick drauf geworfen hatte, half schließlich auf dc2

samba-tool drs replicate --full-sync --local “$(hostname -f)” dc.xyz.de DC=xyz,DC=de

und ein Neustart des samba-Dienstes mit

/etc/init.d/samba restart

Anders als in Problem: Samba Replication Error with "WERR_BAD_NET_RESP" war es ja die Partition ohne CN=Configuration, die den Fehler brachte.

Mastodon