Bug 44122 - Samba 3 DC setup failed in UCS 4.2
Samba 3 DC setup failed in UCS 4.2
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: Samba
UCS 4.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
Samba maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-03-29 10:17 CEST by Stefan Gohmann
Modified: 2020-07-03 20:51 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.114
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2017-03-29 10:17:07 CEST
I tried to configure a UCS 4.2 DC Master as Samba 3 DC (Windows NT) by installing univention-samba.

The configuration fails, from the join log:
------------------------------------------------------------------------------
2017-03-29 01:39:43.471657102+02:00 (in joinscript_init)
Not updating samba/role
Not updating samba/profileserver
Not updating samba/profilepath
Not updating samba/homedirserver
Not updating samba/homedirpath
Not updating samba/homedirletter
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Not updating samba/user
Not updating samba/user/pwdfile
Setting stored password for "cn=admin,dc=deadlock42,dc=intranet" in secrets.tdb
setting idmap secret for '*' from /etc/ldap.secret
Secret stored
Object modified: cn=master421,cn=dc,cn=computers,dc=deadlock42,dc=intranet
Failed to join domain: failed to find DC for domain DEADLOCK42 - Undetermined error
Bad SMB2 signature for message
[0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
[0000] F8 30 C9 8B 63 6D 27 62   4F 52 FB 1F 96 EC 6C 14   .0..cm'b OR....l.
Failed to join domain: failed to lookup DC info for domain 'DEADLOCK42' over rpc: Access denied
Bad SMB2 signature for message
[0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
[0000] 55 28 8D BA C4 E7 23 44   DE B4 94 E5 0A CF 80 83   U(....#D ........
Failed to join domain: failed to lookup DC info for domain 'DEADLOCK42' over rpc: Access denied
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1
------------------------------------------------------------------------------

The following steps fixed it for me:
 ucr set samba/max/protocol=SMB2
 /etc/init.d/smbd restart
 /etc/init.d/nmbd restart
 /etc/init.d/winbind restart
 univention-run-join-scripts
Comment 1 Felix Botner univentionstaff 2017-03-29 12:53:20 CEST
https://bugzilla.samba.org/show_bug.cgi?id=12200
Comment 2 Ingo Steuwer univentionstaff 2020-07-03 20:51:05 CEST
This issue has been filed against UCS 4.2.

UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.