Bug 42554 - Nagios-Monitoring DRS-Replication
Nagios-Monitoring DRS-Replication
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 4.1
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: Samba maintainers
Depends on: 29463
  Show dependency treegraph
Reported: 2016-10-04 17:05 CEST by Michael Grandjean
Modified: 2019-01-03 07:20 CET (History)
8 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted after Product Owner Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2016-10-04 17:05:28 CEST
Unfortunately, the existing nagios plugin does not seem to work as expected:

Excerpt INBOUND:
> root@ucs01:~# samba-tool drs showrepl | grep -i ^`ucr get ldap/base` -A 5
> DC=example,DC=org
>         Default-First-Site-Name\UCS02 via RPC
>                 DSA object GUID: f6983e75-0eb0-4444-b2fd-4ab29e0bfd7e
>                 Last attempt @ Tue Oct  4 16:51:50 2016 CEST failed, result 58 (WERR_BAD_NET_RESP)
>                 7736 consecutive failure(s).
>                 Last success @ Tue Oct  4 16:17:47 2016 CEST
> [...]

Nagios plugin:
> root@ucs01:~# /usr/lib/nagios/plugins/check_univention_samba_drs_failures
> Samba DRS OK: no drs failures

+++ This bug was initially created as a clone of Bug #29463 +++

Eine Störung der DRS-Replikation kann zu zahlreichen Problemen führen, u.a. kein ein längere Zeit "abgekoppelter" DC alte Änderungen replizieren und damit aktuellere Änderungen rückgängig machen.

Gut wäre ein Nagios-Monitoring der DRS-Replikation, z.B. durch Auswerten der Ausgabe von "samba-tool drs showrepl" (oder besser durch direktes Abfragen von samba4?).

Typische Fehlersituationen:
- nicht erreichbare Hosts (z.B. durch Firewall-Änderungen etc.)
- Keberos-Störungen (im einfachsten Fall durch falsche Uhrzeit)
Comment 1 Stefan Gohmann univentionstaff 2019-01-03 07:20:04 CET
This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018.

Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.