Bug 10060 - Samba-tool demote doesn't remove DFS entry
Summary: Samba-tool demote doesn't remove DFS entry
Status: NEW
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.0.6
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-07-31 17:41 UTC by Mike Ray
Modified: 2022-01-10 23:50 UTC (History)
3 users (show)

See Also:


Attachments
snap showing what was described (175.19 KB, image/png)
2013-07-31 17:41 UTC, Mike Ray
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Ray 2013-07-31 17:41:08 UTC
Created attachment 9094 [details]
snap showing what was described

Samba-tool demote run on a domain controller does not remove the DFS entry within AD. This causes some clients to attempt to map \\<domain>\sysvol and/or \\<domain>\netlogon to a DC that is inaccessible. This prevents Group Policy from applying and from logon scripts from running. Manually trying to browse those directories give an access denied error. 

It can be proven not be an issue with the domain, running DCs or replication by browsing \\<dc>\netlogon or \\<dc>\sysvol of a known running DC (or by mapping those as drives).

These DFS shares are mounted from a seemingly random DC returned from get_dcs_insite (dfs_server_ad.c), that has no correlation to the DC that a machine has authenticated with (nltest /dsgetdc), and it seems that clients cache this data as the same clients will fail repeatedly. Additionally, because it is random, some clients work, some don't and some have access to only one or the other share.

Attached is a screen show showing the windows side of it.

What follows is from attempting to access the volumes from a client that has mapped it with a bad DC (log level = 2 msdfs:8 auth:5 winbind:5 idmap:5 acls:3):

[2013/07/31 10:11:50.351007,  2] ../lib/util/modules.c:199(do_smb_load_module)
  Module 'acl_xattr' loaded
[2013/07/31 10:11:50.351137,  2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2013/07/31 10:11:54.278401,  2] ../source3/smbd/smb2_server.c:3250(smbd_smb2_request_incoming)
  smbd_smb2_request_incoming: client read error NT_STATUS_CONNECTION_RESET
[2013/07/31 10:12:03.820064,  2] ../source3/smbd/smb2_server.c:3250(smbd_smb2_request_incoming)
  smbd_smb2_request_incoming: client read error NT_STATUS_CONNECTION_RESET
[2013/07/31 10:12:12.990057,  2] ../source3/smbd/server.c:436(remove_child_pid)
  Could not find child 29616 -- ignoring
[2013/07/31 10:13:04.310326,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.310585,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam
[2013/07/31 10:13:04.310791,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam'
[2013/07/31 10:13:04.311028,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam_ignoredomain
[2013/07/31 10:13:04.311322,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam_ignoredomain'
[2013/07/31 10:13:04.311615,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend unix
[2013/07/31 10:13:04.311848,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'unix'
[2013/07/31 10:13:04.312177,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend winbind
[2013/07/31 10:13:04.312396,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'winbind'
[2013/07/31 10:13:04.312625,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend wbc
[2013/07/31 10:13:04.312916,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'wbc'
[2013/07/31 10:13:04.313188,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend trustdomain
[2013/07/31 10:13:04.313431,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'trustdomain'
[2013/07/31 10:13:04.313713,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend ntdomain
[2013/07/31 10:13:04.313948,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'ntdomain'
[2013/07/31 10:13:04.314179,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend guest
[2013/07/31 10:13:04.314394,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'guest'
[2013/07/31 10:13:04.314709,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend samba4
[2013/07/31 10:13:04.314967,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'samba4'
[2013/07/31 10:13:04.315155,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.317266,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.326949,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.327135,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.327200,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.334491,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.334763,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.335055,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.358912,  2] ../lib/util/modules.c:199(do_smb_load_module)
  Module 'acl_xattr' loaded
[2013/07/31 10:13:04.359200,  2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2013/07/31 10:13:04.710593,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.710781,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam
[2013/07/31 10:13:04.710885,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam'
[2013/07/31 10:13:04.711060,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam_ignoredomain
[2013/07/31 10:13:04.711206,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam_ignoredomain'
[2013/07/31 10:13:04.711334,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend unix
[2013/07/31 10:13:04.711461,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'unix'
[2013/07/31 10:13:04.711633,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend winbind
[2013/07/31 10:13:04.711763,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'winbind'
[2013/07/31 10:13:04.711900,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend wbc
[2013/07/31 10:13:04.712028,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'wbc'
[2013/07/31 10:13:04.712199,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend trustdomain
[2013/07/31 10:13:04.712346,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'trustdomain'
[2013/07/31 10:13:04.712499,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend ntdomain
[2013/07/31 10:13:04.712630,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'ntdomain'
[2013/07/31 10:13:04.712801,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend guest
[2013/07/31 10:13:04.712931,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'guest'
[2013/07/31 10:13:04.713063,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend samba4
[2013/07/31 10:13:04.713191,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'samba4'
[2013/07/31 10:13:04.713309,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.714729,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.724269,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.724454,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.724522,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.731541,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.731826,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.732184,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.753375,  2] ../lib/util/modules.c:199(do_smb_load_module)
  Module 'acl_xattr' loaded
[2013/07/31 10:13:04.753581,  2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2013/07/31 10:13:04.759954,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.760274,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.811930,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.812216,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.816764,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.817060,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.822134,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.822448,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.827359,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.827659,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.832599,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.832907,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.837712,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.838035,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.842882,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.843109,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.847810,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.848029,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.852705,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.852926,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.857663,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.857929,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.866907,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.867146,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam
[2013/07/31 10:13:04.867284,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam'
[2013/07/31 10:13:04.867360,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend sam_ignoredomain
[2013/07/31 10:13:04.867450,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'sam_ignoredomain'
[2013/07/31 10:13:04.867560,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend unix
[2013/07/31 10:13:04.867678,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'unix'
[2013/07/31 10:13:04.867848,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend winbind
[2013/07/31 10:13:04.867949,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'winbind'
[2013/07/31 10:13:04.868080,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend wbc
[2013/07/31 10:13:04.868203,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'wbc'
[2013/07/31 10:13:04.868307,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend trustdomain
[2013/07/31 10:13:04.868449,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'trustdomain'
[2013/07/31 10:13:04.868551,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend ntdomain
[2013/07/31 10:13:04.868699,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'ntdomain'
[2013/07/31 10:13:04.868838,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend guest
[2013/07/31 10:13:04.868971,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'guest'
[2013/07/31 10:13:04.869107,  5] ../source3/auth/auth.c:48(smb_register_auth)
  Attempting to register auth backend samba4
[2013/07/31 10:13:04.869254,  5] ../source3/auth/auth.c:60(smb_register_auth)
  Successfully added auth method 'samba4'
[2013/07/31 10:13:04.869447,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.871128,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.881494,  5] ../source3/auth/auth.c:476(make_auth_context_subsystem)
  Making default auth method list for server role = 'active directory domain controller'
[2013/07/31 10:13:04.881627,  5] ../source3/auth/auth.c:351(load_auth_module)
  load_auth_module: Attempting to find an auth method to match samba4
[2013/07/31 10:13:04.881689,  5] ../source3/auth/auth.c:376(load_auth_module)
  load_auth_module: auth method samba4 has a valid init
[2013/07/31 10:13:04.904883,  2] ../lib/util/modules.c:199(do_smb_load_module)
  Module 'acl_xattr' loaded
[2013/07/31 10:13:04.905082,  2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
  connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2013/07/31 10:13:04.911519,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.911870,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.971299,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.971616,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.976385,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.976701,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.981756,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.982070,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.987064,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.987378,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.992403,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.992714,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:04.997659,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:04.998013,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:05.003756,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:05.004210,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:05.009222,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:05.009608,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:05.014690,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:05.015070,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:05.019995,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:05.020387,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.705590,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.706143,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.711411,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.711708,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.716473,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.716647,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.721578,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.721886,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.726710,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.726996,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.731697,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.731965,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.736660,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.736913,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.741728,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.741996,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.746941,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.747210,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.751836,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.752097,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.756821,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.757090,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.762064,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.762339,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.767132,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.767406,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.772192,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.772459,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.777154,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.777421,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.782298,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.782563,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.787234,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.787558,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.792227,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.792490,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.797204,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.797461,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.802347,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.802688,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.807259,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.807593,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR
[2013/07/31 10:13:07.812337,  2] ../dfs_server/dfs_server_ad.c:219(get_dcs_insite)
  ../dfs_server/dfs_server_ad.c:219: Search for computer on CN=DCT2\0ADEL:029d0b79-9c42-4286-bdf6-211411c19723,CN=Deleted Objects,DC=x-es,DC=com failed - (null)
[2013/07/31 10:13:07.812673,  2] ../dfs_server/dfs_server_ad.c:349(get_dcs)
  ../dfs_server/dfs_server_ad.c:349: Failed to get DC from site CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x-es,DC=com - NT_STATUS_INTERNAL_ERROR



Manually removing the bad entries with ASDI Edit (MS tool -- I'm not sure of the samba-tool equivalent) from the path CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=<domain>, appears to have fixed it (3 hours, no errors).
Comment 1 Mike Ray 2013-08-06 16:13:38 UTC
It's been running for nearly a week no with 0 problems. The manual fix seems to work but if it could be incorporated, that would be nice.