Cannot remove a lingering object with repadmin???

Giganews Newsgroups
Subject: Cannot remove a lingering object with repadmin???
Posted by:  infopath (infopa…@discussions.microsoft.com)
Date: Thu, 13 Dec 2007

Hi,
I'm having trouble removing a lingering object from a server that was
disconnected for long time.
Our topology is HUB-AND-SPOKE. We have more than 500 servers that are DCs,
running Windows Server 2003 Standard with SP1. The problematic server (DC3)
is in a branch in its own site and network scope. It replicates from one DC1
in the HUB and replicates to other DC2 in the HUB
While replicating DC3 to DC2 the error 8606 ocurred. An event 1988 was
logged in DC2's event log. That's ok - it shuld be that way.
So I performed repadmin /removelingeringobjects DC3 <DC2 GUID>
dc=ourdomain,dc=net.
The process cleaned up about 500 objects without giving any error:
=====================================
Active Directory has completed the removal of lingering objects on the local
domain controller. All objects on this domain controller have had their
existence verified on the following source domain controller.

Source domain controller:
eb2a8786-f52c-4410-b234-3905d14b9e96._msdcs.edu-bg.net
Number of objects deleted:
604
=====================================

That was good. But when trying to replicate DC3 to DC2 the same 8606 error
ocurred (also logged as 1988 on DC2):
====================
Source DC (Transport-specific network address):
1161b402-1e44-4b0c-8850-c327701fd439._msdcs.edu-bg.net
Object:
DC=145.15.96\0ADEL:e3a452e3-48d3-4203-88bf-29e5a41e9b24,CN=Deleted
Objects,DC=edu-bg,DC=net
Object GUID:
e3a452e3-48d3-4203-88bf-29e5a41e9b24
====================
This is an DNS record that was not removed by repadmin...
I rerun repadmin with the same parameters as above, but the result was: 0
objects were removed.

I decided to view if the lingering object's metadata is available in DC2.
Here is the output:
================================
C:\>repadmin /showobjmeta dc01s-001-dom02
"DC=145.15.96\0ADEL:e3a452e3-48d3-4203
-88bf-29e5a41e9b24,CN=Deleted Objects,DC=edu-bg,DC=net"
DsReplicaGetInfo() failed with status 8333 (0x208d):
================================
i.e. the object was not found on DC2.

When I try to see object's metadata on problematic DC i get:
++++++++++++++++++++++++
C:\>repadmin /showobjmeta sml09s-055-sdc1
"DC=145.15.96\0ADEL:e3a452e3-48d3-4203
-88bf-29e5a41e9b24,CN=Deleted Objects,DC=edu-bg,DC=net"

12 entries.
Loc.USN                          Originating DC  Org.USN  Org.Time/Date
Ver Attribute
=======                          =============== ========= =============
=== =========
399623    9fb9a539-36a6-46cc-aaa1-5994b16ab0fa  1908755 2006-09-11 08:41:16
  1 objectClass
399623    9fb9a539-36a6-46cc-aaa1-5994b16ab0fa  1908755 2006-09-11 08:41:16
  1 instanceType
399623    9fb9a539-36a6-46cc-aaa1-5994b16ab0fa  1908755 2006-09-11 08:41:16
  1 whenCreated
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  1 isDeleted
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  2 showInAdvancedViewOnly
399623          MON29-015-Site\MON29S-015-SDC1    589713 2007-06-04 12:01:56
  3 nTSecurityDescriptor
768066          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  2 name
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  7 dnsRecord
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  1 lastKnownParent
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  2 objectCategory
768067          SOF46-011-Site\SOF46S-011-SDC1    770236 2007-09-17 15:51:19
  6 dNSTombstoned
768066          SML09-055-Site\SML09S-055-SDC1    768066 2007-09-25 19:59:55
  4 dc
0 entries.
Type    Attribute    Last Mod Time                            Originating DC
Loc.USN Org.USN Ver
======= ============  =============
=================
======= ======= ===
        Distinguished Name
        =============================

++++++++++++++++++++++++

I even tried removing the object with LDP as in KB314282, but I'm getting
this error:
-----------
***Call Modify...
ldap_modify_s(ld, '(null)',[1] attrs);
Error: Modify: Operations Error. <1>
Server error: 00002095: SvcErr: DSID-032107AE, problem 5012 (DIR_ERROR),
data 87

-----------

Am I doing everyting right? I used repadmin /removelingeringobjects many
times but with success. What is happening now? Why this object is somekind of
transparent to repadmin?
The same object is preventing replcation on 5 more DCs.

TSL is 180 days.

Replies