Univention Bugzilla – Bug 57027
Join fails because the S4 connector gets restarted every 10 seconds
Last modified: 2024-02-23 13:26:55 CET
I've tried to join a school slave in a big customer environment (180k users and 290 school servers). The join gets stuck or fails because the s4 connector is restarted every 10 seconds in create_spn_account.sh which is started in /usr/lib/univention-install/98univention-samba4-dns.inst. The 10 seconds are not enough time to continue with the synchronization: root@schoolslave:~# ls -1 /var/lib/univention-connector/s4/ | wc -l 234278 root@schoolslave:~# root@schoolslave:~# ps fx | grep -A 4 univention-join 25424 pts/1 S+ 0:00 | \_ /bin/bash /usr/sbin/univention-join 15031 pts/1 S+ 0:00 | \_ /bin/bash /usr/lib/univention-install/98univention-samba4-dns.inst --binddn XXX --bindpwdfile /tmp/tmp.XXX/dcpwd 15077 pts/1 S+ 0:02 | \_ /bin/bash /usr/share/univention-samba4/scripts/create_spn_account.sh --samaccountname dns-XXX --serviceprincipalname DNS/XXX --privatekeytab dns.keytab --binddn XXX --bindpwdfile /tmp/tmp.XXX/dcpwd --resync 32045 pts/1 S+ 0:00 | \_ sleep 10
I've installed the test packages and two joins were successful.
23281a3b72 Fix resync in create_spn_account.sh 98c4c480c3 Advisory Package built: Package: univention-samba4 Version: 9.0.15-2 Branch: ucs_5.0-0 Scope: errata5.0-6
OK: S4Connecor is not restarted every 10 seconds OK: Package update/installation OK: Manual schoolreplica join with 200.000 "global" users and 20.000 groups OK: YAML Verified
<https://errata.software-univention.de/#/?erratum=5.0x962>
I dispute this is really a "regression" as 59d3076b98be7d6ff3fa13acd7d5d2696feeac56 added the "--resync" functionality to improve the situation, but that change was incomplete and needed this additional improvement the situation for even more scenarios. YMMV