Bug 34097 - Samba 4 is not supported on administrative dc slaves (Verwaltungsserver)
Samba 4 is not supported on administrative dc slaves (Verwaltungsserver)
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: Samba 4
UCS@school 3.2
Other Linux
: P5 normal (vote)
: UCS@school 3.2 R2
Assigned To: Arvid Requate
Stefan Gohmann
:
Depends on:
Blocks: 34098
  Show dependency treegraph
 
Reported: 2014-02-10 17:22 CET by Sönke Schwardt-Krummrich
Modified: 2014-06-12 09:20 CEST (History)
0 users

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): U@S: Administrational DC
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2014-02-10 17:22:47 CET
The meta-package for administrative DC slaves (Verwaltungsserver) does not configure the selective replication for Samba 4 and does not disable DRS.
This way such a host may mess up the LDPA/AD directories.
Comment 1 Arvid Requate univentionstaff 2014-05-08 22:04:25 CEST
The package ucs-school-nonedu-slave now has a Joinscript. Basically it's a copy of the joinscript from ucs-school-slave, with the small difference, that it registeres the service "UCS@school Management" instead of "UCS@school Education" (see Bug 34172). This way, the listener module implemented for Bug 32187 can differenciate between the specific UCS@school service types.

Thus, the nonedu-slave will also prepare UCR variables in a way that disables DRS-replication and registration of DNS SRV records specific to Kerberos and LDAP.

Changelog adjusted.
Comment 2 Stefan Gohmann univentionstaff 2014-05-20 10:38:28 CEST
Changelog: OK

Code: OK

Tests: OK
 - service entry: OK
 - replication: OK (only staff users)
 - connector: OK (no rejects)
 - drs replication: OK (disabled)
 - DNS SRV records: OK
 - win 7 join + auth: OK (I got an error message during the login as staff user, that's Bug #34179)
Comment 3 Sönke Schwardt-Krummrich univentionstaff 2014-06-12 09:19:24 CEST
UCS@school 3.2 R2 has been released:
http://docs.univention.de/release-notes-ucsschool-3.2R2-de.html

If this error occurs again, please use "Clone This Bug".