Bug 10470 - Schema replication on a 2003 domain which was migrated from a 2000 domain : Failed
Summary: Schema replication on a 2003 domain which was migrated from a 2000 domain : F...
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: unspecified
Hardware: All All
: P5 major (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-02-25 13:07 UTC by Romain MARIADASSOU
Modified: 2016-07-29 03:16 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Romain MARIADASSOU 2014-02-25 13:07:10 UTC 
An Active Directory domain which was first created with a 2000 AD server contain wrong date for Schema Attribute : "whenCreated".

After Samba (4.0 - 4.1) did joined to the domain as AD DC, replication failed with error Event ID 1791 : error 8418 (http://support.microsoft.com/kb/2734946)

Example of wrong attribute value :
CN : ACS-Identity-Name : Attribute "whenCreated" on MS AD contain : 21/10/1630 16:21:30
CN : ACS-Identity-Name : Attribute "whenCreated" on Samba AD contain : 01/01/1970 00:00:00

As you can see, AD 2000 created a value with year 1630, and Samba create it with year 1970.


Even after sync, force sync, full sync, values do not get corrected.
Comment 1 Andrew Bartlett 2016-07-29 03:16:45 UTC 
This is probably happening because both values represent 0, just in different time schemes.