Bug 33382 - s4 role transfer fails
s4 role transfer fails
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: backup2master
UCS 3.0
Other Linux
: P5 critical (vote)
: UCS 3.2
Assigned To: Arvid Requate
Erik Damrose
: interim-3
Depends on: 26986
Blocks: 27893
  Show dependency treegraph
 
Reported: 2013-11-14 14:43 CET by Erik Damrose
Modified: 2013-11-19 06:41 CET (History)
4 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
Do role transfer earlier in the script (1.19 KB, patch)
2013-11-14 14:43 CET, Erik Damrose
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Damrose univentionstaff 2013-11-14 14:43:35 CET
Created attachment 5630 [details]
Do role transfer earlier in the script

The s4 role transfer during backup2master fails. The current version checks for the old master object, which, at that point in the script, has already been deleted. Attached is a proposed patch which moves the role transfer ahead of the object deletion.

Workaround on samba4 systems: Execute samba-tool fsmo seize --role=all --force after backup2master

+++ This bug was initially created as a clone of Bug #26986 +++
Comment 1 Erik Damrose univentionstaff 2013-11-14 14:47:47 CET
In addition, while fixing this, the test when to execute the role transfer should be improved to check if samba4 is installed. Currently, it is only tested if samba-tool exists on the local system, but due to dependencies it is also available on systems with samba3. There, the call fails with an error due to a missing library.
Comment 2 Arvid Requate univentionstaff 2013-11-14 15:37:19 CET
Ok, role transfer is now done before deleting the old DC account from samba4, and only if sam.ldb exists locally.
Comment 3 Erik Damrose univentionstaff 2013-11-15 10:44:44 CET
OK: samba3 - backup2master
OK: samba4 - backup2master

Tests: backup2master, user creation, windows domain joins, additional slave domain join, user login with pre- and postbackup created users.

OK: changelog

Verified
Comment 4 Stefan Gohmann univentionstaff 2013-11-19 06:41:33 CET
UCS 3.2 has been released:
 http://docs.univention.de/release-notes-3.2-en.html
 http://docs.univention.de/release-notes-3.2-de.html

If this error occurs again, please use "Clone This Bug".