Unable to Replicate to Slave DC's or Join a New Server

[Peter]

SOLVED:
after i upgraded the backup domain controller to the master and turnd of the old master i fixed the s4 connector ( i deleted in the regestry the univention/ldapschema/msgpo )

Look here:

How-to: Handle s4-connector rejects

How-to: Handle s4-connector rejects What are rejects? Every change in openldap or samba is transferred to the other system by the s4-connector and kept in sync. By changes we mean, for example, changing a first name, last name or phone number. s4-connector rejects occur when such changes cannot be synchronized for various reasons. How to deal with rejects? You can use the following command to have a look at the current S4-Connector replication status: root@example:~# univention-s4connecto…

Problem: Remove S4 Connector Rejects Which Does Not Exist in LDAP

Problem: You see S4-Connector rejects but you are not able to remove them based on this article. Investigation Step 1 Identify object DN’s of the rejects: root@dc-01:~# univention-s4connector-list-rejected UCS rejected S4 rejected 1: S4 DN: CN=EU.MULTI.UCS,CN=Computers,DC=eu,DC=multi,DC=ucs UCS DN: <not found> 2: S4 DN: CN=EU.MULTI.UCS,CN=Computers,DC=eu,DC=multi,DC=ucs UCS DN: <not found> last synced USN: 254054 Step 2 Check if the object exists in OpenLDAP: root@dc-01:/~# un…

Samba 4 Troubleshooting

Samba 4 Troubleshooting Guide DRS Replication Further Articles for Replication issues are samba-tool-drs-showrepl-shows-werr-gen-failure and drs-replication-fails samba-tool drs showrepl To get an overview of the current drs replication status you can use this command at every UCS Samba 4 DC which is joined to the domain: samba-tool drs showrepl Sitename\Servername DSA Options: 0x00000001 DSA object GUID: ffad9f19-0e90-457b-b733-469e4b2280a1 DSA invocationId: 908dbb52-12a6-47a2-ae03-1a…