Bug 31772 - 50_samba/30winbind fails on memberserver and DC backups
50_samba/30winbind fails on memberserver and DC backups
Status: CLOSED WORKSFORME
Product: UCS Test
Classification: Unclassified
Component: Samba
unspecified
Other Linux
: P5 normal (vote)
: UCS 3.2-1-errata
Assigned To: Stefan Gohmann
Felix Botner
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-06-20 08:35 CEST by Stefan Gohmann
Modified: 2014-04-16 16:16 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2013-06-20 08:35:18 CEST
I've activated the test case 50_samba/30winbind for memberserver. Currently the test fails at least in a S4 domain on a memberserver:
  http://jenkins.knut.univention.de:8080/job/autotest/SambaVersion=s3,Systemrolle=member/lastCompletedBuild/testReport/%28root%29/50_samba_30winbind/Winbind_Test/
Comment 1 Arvid Requate univentionstaff 2013-06-20 19:17:32 CEST
Test has been adjusted (wbinfo --name-to-sid  only works after wbinfo --authenticate works once, which takes some time due to repliaction).
Comment 3 Arvid Requate univentionstaff 2013-07-09 11:07:41 CEST
Yeah, it fails at the preliminary sanity check. ;aybe we have to restart samba+winbind in the beginning of the test or at the end of the previous test, as the previous test performs a "net rpc join", maybe that causes the problem.
Comment 4 Stefan Gohmann univentionstaff 2013-07-09 12:32:11 CEST
(In reply to Arvid Requate from comment #3)
> Yeah, it fails at the preliminary sanity check. ;aybe we have to restart
> samba+winbind in the beginning of the test or at the end of the previous
> test, as the previous test performs a "net rpc join", maybe that causes the
> problem.

I think we should move 25domain-join-without-admin-rights to a later point because as you said it uses net rpc join. First we should check if the installed packages are running as excepted (30winbind) and than we could do such things.
Comment 6 Arvid Requate univentionstaff 2013-08-26 12:38:30 CEST
Yes, the --ping-dc does not work against the samba4 winbind implementation:

+[2013/08/06 02:28:47.120149, 10, pid=27232, effective(0, 0), real(0, 0)] ../source4/winbind/wb_samba3_protocol.c:246(wbsrv_samba3_handle_call)
+  Unimplemented winbind samba3 request 34

Since this was more of a "hey, don't know what it does, but let's tests it anyway" kind of test, I changed the code to just issue an error message and continue.



Note: There are more un- or dummy-implemented calls:

root@master110:~# wbinfo --trusted-domains
failed to call wbcListTrusts: WBC_ERR_DOMAIN_NOT_FOUND
Could not list trusted domains
root@master110:~# wbinfo --own-domain
ARERR311I3
root@master110:~# wbinfo -D ARERR311I3
Name              : ARERR311I3
Alt_Name          : ARERR311I3
SID               : S-1-2-3-4
Active Directory  : No
Native            : No
Primary           : No
root@master110:~# wbinfo --dsgetdcname ARERR311I3 
Could not find dc for ARERR311I3
Comment 7 Stefan Gohmann univentionstaff 2013-09-19 20:58:09 CEST
The test case fails on a DC Slave with S4:

**************************************************************************
*** BEGIN *** ['/bin/bash', '30winbind'] ***
##  create User
info 2013-09-19 11:38:22	 create user vou0qa7n
Object created: uid=vou0qa7n,cn=users,dc=autotest095,dc=local
Waiting for replication:
OK: replication complete (nid=3392 lid=3392)
Done: replication complete.
##  wbinfo -t
checking the trust secret for domain AUTOTEST095 via RPC calls succeeded
##  wbinfo --ping
Ping to winbindd succeeded
##  wbinfo --ping-dc
failed to call wbcPingDc: WBC_ERR_DOMAIN_NOT_FOUND
checking the NETLOGON dc connection to "" failed
30winbind: Zeile 49: err: Kommando nicht gefunden.
##  wbinfo -D
failed to call wbcListTrusts: WBC_ERR_DOMAIN_NOT_FOUND
Could not list trusted domains
Waiting for S4-Connector and LDAP replication of domain sambaSID for user vou0qa7n (current: S-1-4-2125)....
S4-Connector and LDAP replication of domain sambaSID took 5 seconds
##  wbinfo --name-to-sid:	failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup name vou0qa7n
error 2013-09-19 11:38:27	 wbinfo --name-to-sid 'vou0qa7n' failed
error 2013-09-19 11:38:27	 **************** Test failed above this line (1) ****************
info 2013-09-19 11:38:27	 remove user vou0qa7n
Object removed: uid=vou0qa7n,cn=users,dc=autotest095,dc=local
debug 2013-09-19 11:38:27	 user vou0qa7n removed
info 2013-09-19 11:38:27	 checking whether the user vou0qa7n is really removed
debug 2013-09-19 11:38:27	 user vou0qa7n does not exist
*** END *** 1 ***
**************************************************************************
Comment 8 Stefan Gohmann univentionstaff 2013-09-23 14:01:59 CEST
Wait until Arvid is back.
Comment 9 Arvid Requate univentionstaff 2013-10-17 14:12:38 CEST
The failure of the "wbinfo --name-to-sid" in Samba4 domains was a timing issue. Now the test waits ofor DRS replication as well.
Comment 11 Stefan Gohmann univentionstaff 2013-11-01 16:51:18 CET
Move ucs-test issue to interim-4.
Comment 12 Stefan Gohmann univentionstaff 2013-11-08 11:21:41 CET
No blocker for the release.
Comment 13 Stefan Gohmann univentionstaff 2014-03-19 15:51:16 CET
Seems to work now.
Comment 14 Felix Botner univentionstaff 2014-04-04 11:38:20 CEST
OK
Comment 15 Moritz Muehlenhoff univentionstaff 2014-04-16 16:16:56 CEST
Released as an errata update to unmaintained.