Bug 36284 - univention-samba doesn't run net rpc join on DC Backup
univention-samba doesn't run net rpc join on DC Backup
Product: UCS
Classification: Unclassified
Component: Samba
UCS 3.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
Depends on:
  Show dependency treegraph
Reported: 2014-10-23 15:52 CEST by Arvid Requate
Modified: 2017-04-24 18:20 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2014-10-23 15:52:12 CEST
When installing the package univention-samba on a DC Backup, the joinscript is run from postinst without credentials. In this case the joinscript skips the "net rpc join", leaving the Samba BDC unjoind:

root@backup31:~# net rpc testjoin -UAdministrator%univention
lp_bool(): value is NULL or empty!
get_schannel_session_key: could not fetch trust account password for domain 'AR323I2'
net_rpc_join_ok: failed to get schannel session key from server MASTER30 for domain AR323I2. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Join to domain 'AR323I2' is not valid: NT_STATUS_CANT_ACCESS_DOMAIN_INFO

On a DC Slave it works, because the joinscript is executred with Administrative credentials.

Checked with UCS 3.2-3.
Comment 1 Arvid Requate univentionstaff 2017-04-24 18:20:19 CEST
This issue has been filed against UCS 3.2.

UCS 3.2 is out of maintenance and many UCS components have vastly changed in later releases. Thus, this issue is now being closed.

If this is still an issue in newer UCS versions, please use "Clone this bug".
In this case please provide detailed information on how this issue is affecting