Univention Bugzilla – Bug 30131
Post-Installation of Samba4 in UCS@School headquarters: samba4/provision/primary=yes undocumented
Last modified: 2023-06-12 15:39:41 CEST
Falls Samba4 in einer UCS@School Umgebung nur auf Schul-DCs installiert wurde und später dann auf dem Master nachinstalliert werden soll, sind zuätzliche UCR-Variablen zu setzen, bevor die Paket installiert und gejoined werden: ucr set samba4/provision/primary=yes \ connector/s4/allow/secondary=yes univention-install univention-s4-connector univention-run-join-scripts --ask-pass Aktuell scheint das nicht gut dokumentiert zu sein.
Again in English: If Samba4 was installed only on UCS@School Slave DCs and at some point later it shall also be installed on the DC Master in the headquarters, some UCR variables need to be set first before installing the packages and running the joinscripts: ucr set samba4/provision/primary=yes \ connector/s4/allow/secondary=yes univention-install univention-s4-connector univention-run-join-scripts --ask-pass Currently documentation about this seems to be a bit too scarce.
Actually the --ask-pass is not required in this case.
*** Bug 34643 has been marked as a duplicate of this bug. ***
*** Bug 40432 has been marked as a duplicate of this bug. ***
I think it's not critical. The join script will fail, if the UCR variables are not set correctly.
Info: Bug 40432 says: > Otherwise the univention-samba4 joinscript will attempt to join into a school (AFAIR). > > See Bug 31936 Comment 2. If we don't fix it along with Bug 31936 then this needs to be documented properly.
As discussed I checked this again: It's not critical and enough to document it. Details: ============================================================================ root@master60:~# univention-install univention-s4-connector [...] root@master60:~# univention-check-join-status Warning: 'univention-samba4' is not configured. Warning: 'univention-samba4-dns' is not configured. Error: Not all install files configured: 2 missing root@master60:~# univention-run-join-scripts [...] Running 92univention-management-console-web-server.inst skipped (already executed) Running 96univention-samba4.inst failed (exitcode: 1) Running 97univention-s4-connector.inst skipped (already executed) Running 98univention-pkgdb-tools.inst skipped (already executed) Running 98univention-samba4-dns.inst failed (exitcode: 1) root@master60:~# univention-run-join-scripts --ask-pass [...] Running 96univention-samba4.inst failed (exitcode: 1) Running 97univention-s4-connector.inst skipped (already executed) Running 98univention-pkgdb-tools.inst skipped (already executed) Running 98univention-samba4-dns.inst failed (exitcode: 1) ============================================================================ join.log shows the reason: ============================================================================ ERROR(ldb): uncaught exception - LDAP error 68 LDAP_ENTRY_ALREADY_EXISTS - <00002071: ldb_request: Entry already exists (68)> <> File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 628, in run keep_existing=keep_existing) File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1177, in join_DC ctx.do_join() File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1080, in do_join ctx.join_add_objects() File "/usr/lib/python2.7/dist-packages/samba/join.py", line 543, in join_add_objects ctx.samdb.add(rec) checking sAMAccountName Adding CN=MASTER60,OU=Domain Controllers,DC=ar41i2,DC=local Join failed - cleaning up ============================================================================ And this is because the UCS@school Slave PDC has the univention_samaccountname_ldap_check LDB module active.
Created attachment 8298 [details] improve_s4_connector_detection.diff Since I just had this again I've written a patch that should improve the detection of the S4-Connector, so that it "just works" and manual setting of the UCR variable is not required. This is a) good for UCS@school and b) simplifies the code a bit in both, the samba4 and the s4connector join scripts.
Bug 43478 has been tagged for UCS 4.1-4-errata and will fix this.
(In reply to Sönke Schwardt-Krummrich from comment #9) > Bug 43478 has been tagged for UCS 4.1-4-errata and will fix this. Did this happen?
*** This bug has been marked as a duplicate of bug 43478 ***