samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] Problems with W2K8R2 <-> S4 repli

Re: [Samba] Problems with W2K8R2 <-> S4 replication&In-Reply-To=<>

From: Dmitry A. Khromov <da3m0n_at_nospam>
Date: Sun May 23 2010 - 17:32:07 GMT

Michael Wood <> wrote:
>I am not sure if this is the problem, but make sure the time is
>correct on both machines. I got what I think were similar errors when
>my VM decided to get 2 hours out of sync with reality.

Time is synchronized via NTP and kinit works fine, however, I've done
ntpdate with dc0 for sure:

dc1 samba # ntpdate
23 May 20:37:21 ntpdate[28533]: adjust time server offset
-0.016606 sec

Also I've noticed that after successful initial (first run after net
vampire) DNS records update I get the following in my samba.log:
dc1 samba # cat var/samba.log | grep -A 2 -B 1 TSIG
[Sun May 23 14:02:18 2010 MSD, 0
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig
verify failure
[Sun May 23 14:02:18 2010 MSD, 0
/usr/local/samba/sbin/samba_dnsupdate: update failed: REFUSED
----------[output truncated]----------

Also, I've tried to rejoin Samba (by deleting /usr/local/samba entirely,
invoking "metadata cleanup" in ntdsutil, deleting computer object in AD
U&C and cleaning up DNS entries), result is slightly different - the log
still floods with errors (more than 6 hours already). And yes, at least
part of replication is working - I may modify users/computers objects in
AD U&C and the changes will be synchronized in tens of seconds. However
- I still want to try Samba as the only DC in domain (and need to
transfer roles before demoting dc0).

-- To unsubscribe from this list go to the following URL and read the instructions: