action #47072
Updated by flacco about 5 years ago
During an Upgrade from Samba 4.6 to 4.7 with MIT Kerberos, it is necessary to run "samba-tool dbcheck --cross-ncs --fix". dbcheck throws some errors related to our dhcpd-LDAP Schema. We have to check this. Errors: ---- ERROR: Normalisation error for attribute mayContain in CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc value 'iscDhcpSubClassesDN' should be 'iscDhcpSubclassesDN' Not fixing attribute mayContain ERROR: Duplicate values for attribute 'mayContain' in 'CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc' Values contain a duplicate: [iscDhcpSubClassesDN,iscDhcpOptionsDN,iscDhcpStatements,iscDhcpComments,iscDhcpOption]/[iscDhcpSubClassesDN]! Not fixing attribute 'mayContain' ERROR: Not fixing missing 'name' on 'CN=iscDhcpClass,CN=Schema,CN=Configuration,DC=140-net,DC=loc' ERROR: Normalisation error for attribute mustContain in CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc value 'iscDhcpFailoverPrimaryPort' should be 'iscDhcpFailOverPrimaryPort' Not fixing attribute mustContain ERROR: Duplicate values for attribute 'mustContain' in 'CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc' Values contain a duplicate: [cn,iscDhcpFailOverPrimaryServer,iscDhcpFailOverSecondaryServer,iscDhcpFailoverPrimaryPort,iscDhcpFailOverSecondaryPort]/[iscDhcpFailOverPrimaryServer,iscDhcpFailoverPrimaryPort,cn,iscDhcpFailOverSecondaryServer]! Not fixing attribute 'mustContain' ERROR: Not fixing missing 'name' on 'CN=iscDhcpFailOverPeer,CN=Schema,CN=Configuration,DC=140-net,DC=loc' ERROR: incorrect DN SID component for member in object CN=Domain Users,CN=Users,DC=140-net,DC=loc - <GUID=483d45b1-f271-4f72-9fef-ef1d335897a0>;<RMD_ADDTIME=131912412090000000>;<RMD_CHANGETIME=131912412090000000>;<RMD_FLAGS=1>;<RMD_INVOCID=826f4120-d6d5-4a15-b985-f7de29be47b3>;<RMD_LOCAL_USN=5136>;<RMD_ORIGINATING_USN=5136>;<RMD_VERSION=1>;CN=postmaster@140-net.loc,CN=Users,DC=140-net,DC=loc Not fixing SID component mismatch ----