The Samba-Bugzilla – Bug 9429
Unable to demote Windows Server
Last modified: 2015-07-31 08:19:02 UTC
I am unable to demote Windows DCs that are also acting as DNS servers. To be clear, this only occurs if the Windows Server is also a DNS server. The problem appears to be that the 2008R2 server fails replicating data back to the S4 DC during the demotion. The specific error that I receive on the Windows server when running "dcpromo" is:
The operation failed because:
Active Directory Domain Services could not transfer the remaining data in the directory partition CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com to
Active Directory Domain Controller adc1.internal.testdom.com
I receive the following when trying to replicate using samba-tool (adc1=S4rc5 adc2=2008R2):
[root@ADC1 etc]# samba-tool drs replicate adc1 adc2 CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator
Password for [TESTDOM\Administrator]:
ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (2, 'WERR_BADFILE')
File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py", line 334, in run
drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle, source_dsa_guid, NC, req_options)
File "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py", line 83, in sendDsReplicaSync
raise drsException("DsReplicaSync failed %s" % estr)
Replication from adc1 to adc2 works:
[root@ADC1 etc]# samba-tool drs replicate adc2 adc1 CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator Password for [TESTDOM\Administrator]:
Replicate from adc1 to adc2 was successful.
This problem is consistent and can be reproduced as follows (tested on Ubuntu 12.04LTS and CentOS 6.3):
1) Provision S4rc5 (clean or classicupgrade)
2) Join a Windows Server to the domain (I used 2008R2)
3) Promote the Windows Server to function as AD DC + DNS Server via "dcpromo".
4) Attempt to demote the Windows Server via "dcpromo".
No 4.1 blocker => 4.2
Any news on this one?