Bug 40347 - UCS@school: make creation of NETLOGON scripts in /var/lib/samba/netlogon the default
UCS@school: make creation of NETLOGON scripts in /var/lib/samba/netlogon the ...
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: Netlogon scripts
UCS@school 4.1
Other Linux
: P5 normal (vote)
: UCS@school 4.1 R2 vXXX
Assigned To: Daniel Tröder
Florian Best
: interim-1
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-12-28 16:21 CET by Michael Grandjean
Modified: 2016-10-04 13:24 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 4: Will affect most installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain:
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2015-12-28 16:21:18 CET
Right now, NETLOGON scripts are created underneath /var/lib/samba/sysvol/DOMAIN/scripts/user and are synchronised via sysvol-sync. 

For a 15.000 user environment this means 15.000 more files to check for sysvol-sync (total size of ~120MB).


Therefore, the following should be the default:
http://docs.software-univention.de/ucsschool-handbuch-4.1.html#school:windows:samba4netlogon
Comment 1 Daniel Tröder univentionstaff 2016-08-03 13:00:02 CEST
The change is done on fresh UCS@school DCs only.

If both UCRVs are unchanged (empty), they are set:

samba/share/netlogon/path=/var/lib/samba/netlogon
ucsschool/userlogon/netlogon/path=/var/lib/samba/netlogon/user

r71379 : ucs-school-metapackage 9.0.1-5.177.201608031259
Comment 2 Florian Best univentionstaff 2016-09-20 15:34:18 CEST
From what I know about postinst scripts the way it is called is wrong:

if [ "$1" = "configure" ] ; then
 ....
else;
 ... the ucr set code ...
fi

So this wouldn't be called only on new installations but also on "abort-remove", etc.
Comment 3 Florian Best univentionstaff 2016-09-20 15:35:05 CEST
Do we need to set this on administrative servers as well?
Why don't we set these values in the joinscript?
Comment 4 Daniel Tröder univentionstaff 2016-09-21 09:27:42 CEST
r72709: ensure UCRVs are set on new installations only

> Do we need to set this on administrative servers as well?
This was agreed upon with Sönke.
* There are installations with many teachers.
* It is easier to maintain if there are the same settings "everywhere".

> Why don't we set these values in the joinscript?
* No need to manually run the join script on slaves, when updating.
* There is no reliable way to ensure a first-time run with join scripts (count is reset when rejoining).
Comment 5 Florian Best univentionstaff 2016-09-21 19:27:38 CEST
FYI: The package wasn't build. I did that.

OK: ucr variables are set in new installation
OK: updating UCS@school doesn't set the variables

The variables aren't set with "?" so it's not possible to define them prior to installing UCS@school.

OK: YAML

REOPENED: the variables aren't unset on purge.
@Sönke: what is the policy here?
UCR should imho really make it possible to define defaults. that would fix all the unset problems.
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2016-09-22 11:10:51 CEST
(In reply to Florian Best from comment #5)
> FYI: The package wasn't build. I did that.
> 
> OK: ucr variables are set in new installation
> OK: updating UCS@school doesn't set the variables
> 
> The variables aren't set with "?" so it's not possible to define them prior
> to installing UCS@school.
> 
> OK: YAML
> 
> REOPENED: the variables aren't unset on purge.
> @Sönke: what is the policy here?

Hmmm... I split that off into bug 42469.
→ back to RESOLVED

> UCR should imho really make it possible to define defaults. that would fix
> all the unset problems.

Would be better, but would not solve all problems.
Comment 7 Florian Best univentionstaff 2016-09-22 11:31:11 CEST
OK
Comment 8 Sönke Schwardt-Krummrich univentionstaff 2016-09-22 11:37:11 CEST
(In reply to Florian Best from comment #3)
> Do we need to set this on administrative servers as well?

I would say "yes". Due to the same reasons Daniel already wrote. Additionally the sysvol share is also synced on administrative DC slaves against the master. So we might have the same problems there (but in a smaller scale).

> Why don't we set these values in the joinscript?

Too late. The listener module for logon scripts is restarted/reinitialized before the ucs-school join scripts are run through.
What other kind of benefit should it have by setting the values in the join script?
Comment 9 Sönke Schwardt-Krummrich univentionstaff 2016-10-04 13:24:48 CEST
UCS@school 4.1 R2 v5 has been released.

http://docs.software-univention.de/changelog-ucsschool-4.1R2v5-de.html

If this error occurs again, please clone this bug.