Bug 34192 - Windows Server 2012 R2 Essentials as member in a samba4 domain: initial configuration fails
Windows Server 2012 R2 Essentials as member in a samba4 domain: initial confi...
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: Samba4
UNSTABLE
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-02-25 11:16 CET by Felix Botner
Modified: 2020-07-02 16:20 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Felix Botner univentionstaff 2014-02-25 11:16:17 CET
see http://forum.univention.de/viewtopic.php?f=48&t=3080&p=10994#p10994,

The join of a Windows Server 2012 R2 Essentials into a UCS samba4 domaim. Seems that the problem is the missing WKGUID=1EB93889E40C45DF9F0C64D23BBB6237 object. This object provides the container for the Windows Server 2008 R2 feature "Managed Service Accounts", see https://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx

Maybe it is enough to add this container (and a corresponding on the base object).

#!/bin/bash

eval "$(ucr shell)"

ldbadd -H /var/lib/samba/private/sam.ldb <<-%EOF
dn: CN=Managed Service Accounts,$samba4_ldap_base
objectClass: container
cn: Managed Service Accounts
description: Default container for managed service accounts
name: Managed Service Accounts
%EOF

ldbmodify -H /var/lib/samba/private/sam.ldb <<-%EOF
dn: $samba4_ldap_base
changetype: modify
add: wellKnownObjects
wellKnownObjects: B:32:1EB93889E40C45DF9F0C64D23BBB6237:CN=Managed Service Accounts,$samba4_ldap_base
%EOF

If so, we should add this well known GUID to samba4.
Comment 1 Felix Botner univentionstaff 2014-02-25 12:23:15 CET
The initial configuration of the Windows Server 2012 R2 Essentials fails, not the join
Comment 2 Stefan Gohmann univentionstaff 2016-10-05 15:20:12 CEST
Do we have more info about this report?
Comment 3 Stefan Gohmann univentionstaff 2019-01-03 07:30:41 CET
This issue has been filed against the UCS version "unstable" which does not really exist. Please change the version value.
Comment 4 Ingo Steuwer univentionstaff 2020-07-02 16:20:35 CEST
I close this Bugzilla entry as they are filed without a valid UCS version and haven't been changed for more than a year.

In case the bug or feature request is still valid please re-open with the valid UCS version and an updated description.