Univention Bugzilla – Bug 39964
97_samba4_dns_srv_replication fails
Last modified: 2023-10-23 12:49:18 CEST
http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.0%20to%204.1%20Multiserver/5/SambaVersion=s4/testReport/90_ucsschool/97_samba4_dns_srv_replication/test/ [2015-11-13 16:29:01.804326]Modifying the DNS SRV '_ldap._tcp' record in Samba using 'ldbmodify', delete(-ing) a test value: [2015-11-13 16:29:02.092858]### FAIL ### [2015-11-13 16:29:02.092891]An error occured while trying to modify the '_ldap._tcp' SRV record via 'ldbmodify': 'ldbmodify -H /var/lib/samba/private/sam.ldb --user=Administrator%univention -k no'. STDERR: [2015-11-13 16:29:02.092915] 'ERR: (No such object) "No such Base DN: DC=_ldap._tcp,DC=autotest208.local,CN=MicrosoftDNS,CN=System,DC=DomainDnsZones,dc=autotest208,dc=local" on DN DC=_ldap._tcp,DC=autotest208.local,CN=MicrosoftDNS,CN=System,DC=DomainDnsZones,dc=autotest208,dc=local at block before line 3' [2015-11-13 16:29:02.092925]### ###
Please check, if this is an error within UCS@school, UCS or the ucs-test script, and give a short idea about the impact.
Please reenable when fixed: ucs-test-ucsschool (3.0.5-14): r67433 | Bug #39964: skip test
The test output (http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20Multiserver/SambaVersion=s4/37/): *** BEGIN *** ['/usr/bin/python', '97_samba4_dns_srv_replication'] *** *** 90_ucsschool/97_samba4_dns_srv_replication *** Test the DNS SRV record replication. *** *** START TIME: 2016-01-25 03:48:57 *** Obtaining Administrator username and password for the test from the UCR Determining the test scenario, current DC role is 'domaincontroller_slave' Current role is a DC-Slave, no replication should happen for a list of specific DNS SRV records. Obtaining the Samba configuration to determine Samba private path Test case 1: adding new DNS SRV record attribute values in openLDAP, checking their values in Samba: ADD(-ing) the test location values '('53', '777', '63256', 'ucs_test.hostname.local.')' to/from each record in '('_ldap._tcp', '_ldap._tcp.pdc._msdcs', '_ldap._tcp.dc._msdcs', '_ldap._tcp.gc._msdcs', '_gc._tcp', '_kerberos._tcp', '_kerberos._udp', '_kerberos-adm._tcp', '_kerberos._tcp.dc._msdcs', '_kpasswd._tcp', '_kpasswd._udp', '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs', '_kerberos._tcp.Default-First-Site-Name._sites', '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs', '_ldap._tcp.Default-First-Site-Name._sites', '_gc._tcp.Default-First-Site-Name._sites')' ADD(-ing) the test location to/from the record '_ldap._tcp' ADD(-ing) the test location to/from the record '_ldap._tcp.pdc._msdcs' ADD(-ing) the test location to/from the record '_ldap._tcp.dc._msdcs' ADD(-ing) the test location to/from the record '_ldap._tcp.gc._msdcs' ADD(-ing) the test location to/from the record '_gc._tcp' ADD(-ing) the test location to/from the record '_kerberos._tcp' ADD(-ing) the test location to/from the record '_kerberos._udp' ADD(-ing) the test location to/from the record '_kerberos-adm._tcp' ADD(-ing) the test location to/from the record '_kerberos._tcp.dc._msdcs' ADD(-ing) the test location to/from the record '_kpasswd._tcp' ADD(-ing) the test location to/from the record '_kpasswd._udp' ADD(-ing) the test location to/from the record '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs' ADD(-ing) the test location to/from the record '_kerberos._tcp.Default-First-Site-Name._sites' ADD(-ing) the test location to/from the record '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs' ADD(-ing) the test location to/from the record '_ldap._tcp.Default-First-Site-Name._sites' ADD(-ing) the test location to/from the record '_gc._tcp.Default-First-Site-Name._sites' Waiting for connector replication Checking if test values of the SRV records were replicated to Samba. Checking the DNS SRV '_ldap._tcp' record replication from openLDAP to Samba: ### FAIL ### An error occured while trying to get the '_ldap._tcp' DNS SRV record via 'univention-s4search': 'univention-s4search dc=_ldap._tcp', STDERR: Failed to bind - LDAP error 49 LDAP_INVALID_CREDENTIALS - <SASL:[GSS-SPNEGO]: NT_STATUS_LOGON_FAILURE> <> Failed to connect to 'ldaps://slave2032.autotest203.local' with backend 'ldaps': (null) Failed to connect to ldaps://slave2032.autotest203.local - (null) ### ### Performing clean-up after the test: REMOVE(-ing) the test location values '('53', '777', '63256', 'ucs_test.hostname.local.')' to/from each record in '('_ldap._tcp', '_ldap._tcp.pdc._msdcs', '_ldap._tcp.dc._msdcs', '_ldap._tcp.gc._msdcs', '_gc._tcp', '_kerberos._tcp', '_kerberos._udp', '_kerberos-adm._tcp', '_kerberos._tcp.dc._msdcs', '_kpasswd._tcp', '_kpasswd._udp', '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs', '_kerberos._tcp.Default-First-Site-Name._sites', '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs', '_ldap._tcp.Default-First-Site-Name._sites', '_gc._tcp.Default-First-Site-Name._sites')' REMOVE(-ing) the test location to/from the record '_ldap._tcp' REMOVE(-ing) the test location to/from the record '_ldap._tcp.pdc._msdcs' REMOVE(-ing) the test location to/from the record '_ldap._tcp.dc._msdcs' REMOVE(-ing) the test location to/from the record '_ldap._tcp.gc._msdcs' REMOVE(-ing) the test location to/from the record '_gc._tcp' REMOVE(-ing) the test location to/from the record '_kerberos._tcp' REMOVE(-ing) the test location to/from the record '_kerberos._udp' REMOVE(-ing) the test location to/from the record '_kerberos-adm._tcp' REMOVE(-ing) the test location to/from the record '_kerberos._tcp.dc._msdcs' REMOVE(-ing) the test location to/from the record '_kpasswd._tcp' REMOVE(-ing) the test location to/from the record '_kpasswd._udp' REMOVE(-ing) the test location to/from the record '_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs' REMOVE(-ing) the test location to/from the record '_kerberos._tcp.Default-First-Site-Name._sites' REMOVE(-ing) the test location to/from the record '_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs' REMOVE(-ing) the test location to/from the record '_ldap._tcp.Default-First-Site-Name._sites' REMOVE(-ing) the test location to/from the record '_gc._tcp.Default-First-Site-Name._sites' Waiting for connector replication Modifying the DNS SRV '_ldap._tcp' record in Samba using 'ldbmodify', delete(-ing) a test value: ### FAIL ### An error occured while trying to modify the '_ldap._tcp' SRV record via 'ldbmodify': 'ldbmodify -H /var/lib/samba/private/sam.ldb --user=Administrator%univention -k no'. STDERR: 'ERR: (No such object) "No such Base DN: DC=_ldap._tcp,DC=autotest203.local,CN=MicrosoftDNS,CN=System,DC=DomainDnsZones,dc=autotest203,dc=local" on DN DC=_ldap._tcp,DC=autotest203.local,CN=MicrosoftDNS,CN=System,DC=DomainDnsZones,dc=autotest203,dc=local at block before line 3' ### ### *** END TIME: 2016-01-25 03:50:08 *** *** TEST DURATION (H:MM:SS.ms): 0:01:11.169919 *** *** END *** 1 ***
The test is currently disabled during UCS@school jenkins runs.
Fixed the Samba/AD LDAP search for DNS SRV records and re-enabled the test.
It still fails, for example here: http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Large%20Environment/11/testReport/slave300-s2.90_ucsschool/16_s4_slave_automatic_srv_record/slave300_s2_test/ http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Large%20Environment/11/testReport/master300.90_ucsschool/97_samba4_dns_srv_replication/master300_test/ http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Multiserver/225/SambaVersion=s4-school-only/testReport/90_ucsschool/97_samba4_dns_srv_replication/test/ I've seen that the test case uses utils.wait_for_connector_replication(). The function wait_for_connector_replication doesn't check the normal Listener / Notifier replication. Maybe that can be added.
Adjusted in 3.0.15-16.266.201609052113, let's see if this stabilizes the test.
It doesn't work and I've disabled the test case. I guess we need at least '--cross-ncs' but it looks like we have more issues.
*** Bug 37983 has been marked as a duplicate of this bug. ***
I redisabled 16_s4_slave_automatic_srv_record via Bug #37983. It's still broken.
This issue has been filled against UCS@school 4.1 (R2). The maintenance with bug and security fixes for UCS@school 4.1 (R2) has ended on 5th of April 2018. Customers still on UCS 4.1 are encouraged to update to UCS 4.3 (or later). Please contact your partner or Univention for any questions. If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.
This is currently still an issue 5.0-5. Reopening. The following Automated Tests gitlab issue has been created: https://git.knut.univention.de/univention/ucsschool/-/issues/1138