invis-server » invisAD-setup

During an Upgrade from Samba 4.6 to 4.7 with MIT Kerberos, it is necessary to run "samba-tool dbcheck --cross-ncs --fix".

dbcheck throws some errors related to our dhcpd-LDAP Schema. We have to check this.

Errors:

ERROR: Normalisation error for attribute mayContain in CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc
value 'iscDhcpSubClassesDN' should be 'iscDhcpSubclassesDN'
Not fixing attribute mayContain
ERROR: Duplicate values for attribute 'mayContain' in 'CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc'
Values contain a duplicate: [iscDhcpSubClassesDN,iscDhcpOptionsDN,iscDhcpStatements,iscDhcpComments,iscDhcpOption]/[iscDhcpSubClassesDN]!
Not fixing attribute 'mayContain'
ERROR: Not fixing missing 'name' on 'CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc'
ERROR: Normalisation error for attribute mustContain in CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc
value 'iscDhcpFailoverPrimaryPort' should be 'iscDhcpFailOverPrimaryPort'
Not fixing attribute mustContain
ERROR: Duplicate values for attribute 'mustContain' in 'CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc'
Values contain a duplicate: [cn,iscDhcpFailOverPrimaryServer,iscDhcpFailOverSecondaryServer,iscDhcpFailoverPrimaryPort,iscDhcpFailOverSecondaryPort]/[iscDhcpFailOverPrimaryServer,iscDhcpFailoverPrimaryPort,cn,iscDhcpFailOverSecondaryServer]!
Not fixing attribute 'mustContain'
ERROR: Not fixing missing 'name' on 'CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc'
ERROR: incorrect DN SID component for member in object CN=Domain Users,CN=Users,DC=140-net,DC=loc - <GUID=483d45b1-f271-4f72-9fef-ef1d335897a0>;<RMD_ADDTIME=131912412090000000>;<RMD_CHANGETIME=131912412090000000>;<RMD_FLAGS=1>;<RMD_INVOCID=826f4120-d6d5-4a15-b985-f7de29be47b3>;<RMD_LOCAL_USN=5136>;<RMD_ORIGINATING_USN=5136>;<RMD_VERSION=1>;CN=postmaster@140-net.loc,CN=Users,DC=140-net,DC=loc
Not fixing SID component mismatch