We were testing a normal domain and a read only server.

We followed the preparation of setting the read only flags for samba as per the manual.

on running system diagnostic on the READ ONLY system we had the following:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/__init__.py", line 277, in execute
    ret = execute(umc_module, **kwargs)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 150, in run
    problems = list(drs.replication_problems())
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 102, in replication_problems
    for replica_info, neighbour in self.neighbours():
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 97, in neighbours
    (info_type, info) = self._replica_info(replica_info_direction)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 92, in _replica_info
    (info_type, info) = self.drsuapi.DsReplicaGetInfo(self.handle, 1, req1)
samba.WERRORError: (8453, 'WERR_DS_DRA_ACCESS_DENIED')


There is NO error running it on teh R/W master domain