Bug 45847 - Configuring Active Directory connection: sambaJoinScriptFailed
Configuring Active Directory connection: sambaJoinScriptFailed
Status: NEEDMOREINFO
Product: UCS
Classification: Unclassified
Component: System setup
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-12-11 16:44 CET by Johannes Keiser
Modified: 2021-12-15 11:27 CET (History)
4 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.206
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019052621000421, 2019031421000841, 2019031321001029, 2018120921000031, 2018092921000358, 2018071121000279, 2018042421000732, 2018042421000634, 2018020721000429, 2017120721000215, 2017113021000085, 2020080321000681, 2020080721000815, 2020052921000495
Bug group (optional): External feedback
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Keiser univentionstaff 2017-12-11 16:44:19 CET
Version: 4.2-3 errata231 (Lesum)

Remark: already connected to winad before
then reinstall and connect again to winad with the same hostname

Traceback(d41d8cd98f00b204e9800998ecf8427e):
Configuring Active Directory connection: Traceback (most recent call last):
Configuring Active Directory connection: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
Configuring Active Directory connection: success = self.inner_run()
Configuring Active Directory connection: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Configuring Active Directory connection: admember.run_samba_join_script(username, password)
Configuring Active Directory connection: File "%PY2.7%/univention/lib/admember.py", line 1209, in run_samba_join_script
Configuring Active Directory connection: raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed
Comment 1 Johannes Keiser univentionstaff 2017-12-11 17:14:20 CET
Johannes Keiser from comment #0)
> Version: 4.2-3 errata231 (Lesum)
> 
> Remark: already connected to winad before
> then reinstall and connect again to winad with the same hostname
> 

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
    success = self.inner_run()
  File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
    admember.run_samba_join_script(username, password)
  File "%PY2.7%/univention/lib/admember.py", line 1209, in run_samba_join_script
    raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed(In reply to
Comment 2 Johannes Keiser univentionstaff 2017-12-11 17:16:17 CET
Reported again: Version: 4.2-3 errata241 (Lesum)
Comment 3 Johannes Keiser univentionstaff 2017-12-11 17:16:31 CET
(In reply to Johannes Keiser from comment #2)
> Reported again: Version: 4.2-3 errata241 (Lesum)

Remark: Standard-Installation ohne nennenswerte Änderungen
Comment 4 Johannes Keiser univentionstaff 2018-03-15 15:26:37 CET
Reported again: Version: 4.2-3 errata284 (Lesum)
Comment 5 Johannes Keiser univentionstaff 2018-05-03 16:38:31 CEST
Reported again: Version: 4.3-0 errata21 (Neustadt)

Remark: I setup a new installation and wanted it to join an existing Windows-AD-Domain. I selected the install-features:
- join Windows AD domain
- AD Takeover
Comment 6 Johannes Keiser univentionstaff 2018-05-03 16:44:08 CEST
Reported again: Version: 4.3-0 errata21 (Neustadt)

Remark: Versuch einen neuen UCS als Master in eine Windows AD-Domäne aufzunehmen.
Comment 7 Johannes Keiser univentionstaff 2018-07-20 16:25:48 CEST
Reported again:
Version: 4.3-1 errata145 (Neustadt)

Configuring Active Directory connection: Traceback (most recent call last):
Configuring Active Directory connection: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
Configuring Active Directory connection: success = self.inner_run()
Configuring Active Directory connection: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Configuring Active Directory connection: admember.run_samba_join_script(username, password)
Configuring Active Directory connection: File "%PY2.7%/univention/lib/admember.py", line 1253, in run_samba_join_script
Configuring Active Directory connection: raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed
Comment 8 Arvid Requate univentionstaff 2018-07-23 15:51:30 CEST
We should collect the join.log here, see Bug 42366
Comment 9 Johannes Keiser univentionstaff 2018-10-04 12:22:00 CEST
Reported again:  Version: 4.3-2 errata257 (Neustadt)
Traceback: Same as Comment 7

Remark: not able to install UCS server mith multiple-trees in an AD Forest; even the DNS record created manually.
Comment 10 Arvid Requate univentionstaff 2018-10-17 22:29:24 CEST
I've tested several variations of this the situation reported in Comment 9:

1. Joining into a single-tree AD forest (subdom1.maindom.net)
1.a) Use Appcenter to join UCS into a subdomain of a single-tree AD forest
     with different settings for the preferred DNS server (dns/forwarder1)
1.b) Use Installer to join UCS into a subdomain of a single-tree AD forest
     with the forest root AD DC as DNS server

2. Joining into a dual-tree AD forest (maindom1.net and maindom2.org)
2.a.1) Use Appcenter to join UCS into maindom1
2.a.2) Use Appcenter to join UCS into maindom2

All of this worked. Obviously this is only half of the possible setups (e.g. 2.b.1 and 2.b.2 are missing) but my impression is that there are no obvious Samba/AD specific join problems.

My recommendation would be to collect more information from the failing joinscript and attach it to the feedback email (we may need an opt-in for this).
Comment 11 Arvid Requate univentionstaff 2018-10-18 20:15:06 CEST
To find the problem that is causing the samba join to fail, we need to collect additional log data:

/var/log/univention/setup.log
/var/log/univention/join.log
/var/log/univention/management-console-module-adconnector.log

In case of new feedback, please try to kindly ask for these logs if a contact address has been provided.
Comment 12 Johannes Keiser univentionstaff 2019-01-31 16:09:29 CET
Reported again: Version: 4.3-2 errata376 (Neustadt)

Traceback(d41d8cd98f00b204e9800998ecf8427e):
Einrichten der Active-Directory-Verbindung: FAILED: /usr/lib/univention-install/26univention-samba.inst
Configure 98univention-samba4-saml-kerberos.inst Sun Dec  9 00:22:19 CET 2018
2018-12-09 00:22:20.139172223+01:00 (in joinscript_init)
Waiting for user replication...
Expiry for user 'ucs-sso' disabled.
Added 1 records successfully
Changed password OK
2018-12-09 00:22:24.497405700+01:00 (in joinscript_save_current_version)

Einrichten der Active-Directory-Verbindung: Traceback (most recent call last):
Einrichten der Active-Directory-Verbindung: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
Einrichten der Active-Directory-Verbindung: success = self.inner_run()
Einrichten der Active-Directory-Verbindung: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Einrichten der Active-Directory-Verbindung: admember.run_samba_join_script(username, password)
Einrichten der Active-Directory-Verbindung: File "%PY2.7%/univention/lib/admember.py", line 1253, in run_samba_join_script
Einrichten der Active-Directory-Verbindung: raise sambaJoinScriptFailed()
Einrichten der Active-Directory-Verbindung: sambaJoinScriptFailed

Role: domaincontroller_master

(No contact information provided)
Comment 13 Johannes Keiser univentionstaff 2019-03-22 15:39:54 CET
Reported again: Version: 4.4-0 errata0 (Blumenthal)
Reported again: Version: 4.4-0 errata5 (Blumenthal)

Configuring Active Directory connection: Traceback (most recent call last):
Configuring Active Directory connection: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
Configuring Active Directory connection: success = self.inner_run()
Configuring Active Directory connection: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Configuring Active Directory connection: admember.run_samba_join_script(username, password)
Configuring Active Directory connection: File "%PY2.7%/univention/lib/admember.py", line 1273, in run_samba_join_script
Configuring Active Directory connection: raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed

Role: domaincontroller_master

(No contact information provided)
Comment 14 Johannes Keiser univentionstaff 2019-05-28 12:15:23 CEST
Reported again: Version: 4.4-0 errata113 (Blumenthal)

Traceback(d41d8cd98f00b204e9800998ecf8427e):
Configuring Active Directory connection: Traceback (most recent call last):
Configuring Active Directory connection: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 310, in run
Configuring Active Directory connection: success = self.inner_run()
Configuring Active Directory connection: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Configuring Active Directory connection: admember.run_samba_join_script(username, password)
Configuring Active Directory connection: File "%PY2.7%/univention/lib/admember.py", line 1273, in run_samba_join_script
Configuring Active Directory connection: raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed

Role: domaincontroller_master


(No contact information provided)
Comment 15 Christian Castens univentionstaff 2020-06-12 15:00:37 CEST
reported again:
#2020061021000831

Version: 4.4-4 errata624 (Blumenthal)
Remark: Fehler bei der Erstinstallation während des Beitritts zur AD Domäne
Role: domaincontroller_master

Traceback(d41d8cd98f00b204e9800998ecf8427e):
Einrichten der Active-Directory-Verbindung: Traceback (most recent call last):
Einrichten der Active-Directory-Verbindung: File "/usr/lib/python2.7/dist-packages/univention/management/console/modules/setup/setup_script.py", line 313, in run
Einrichten der Active-Directory-Verbindung: success = self.inner_run()
Einrichten der Active-Directory-Verbindung: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Einrichten der Active-Directory-Verbindung: admember.run_samba_join_script(username, password)
Einrichten der Active-Directory-Verbindung: File "/usr/lib/python2.7/dist-packages/univention/lib/admember.py", line 1252, in run_samba_join_script
Einrichten der Active-Directory-Verbindung: raise sambaJoinScriptFailed()
Einrichten der Active-Directory-Verbindung: sambaJoinScriptFailed
Comment 16 Christian Castens univentionstaff 2020-08-19 15:47:25 CEST
reported again:
Version: 4.4-5 errata686 (Blumenthal)
Comment 17 Christian Castens univentionstaff 2020-08-19 15:56:04 CEST
reported again
Version: 4.3-0 errata0 (Neustadt)
Comment 18 Nico Gulden univentionstaff 2020-10-12 17:04:33 CEST
We need to gain more insights about the environment to get an idea about the reason.
Comment 19 Johannes Lohmer univentionstaff 2021-11-25 12:54:49 CET
Reported again: 2021050821000237


Version: 4.4-8 errata969 (Blumenthal)

Remark: Trying to join AD Microsoft sbs2003

Error:
Configuring Active Directory connection: Traceback (most recent call last):
Configuring Active Directory connection: File "%PY2.7%/univention/management/console/modules/setup/setup_script.py", line 313, in run
Configuring Active Directory connection: success = self.inner_run()
Configuring Active Directory connection: File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember", line 119, in inner_run
Configuring Active Directory connection: admember.run_samba_join_script(username, password)
Configuring Active Directory connection: File "%PY2.7%/univention/lib/admember.py", line 1266, in run_samba_join_script
Configuring Active Directory connection: raise sambaJoinScriptFailed()
Configuring Active Directory connection: sambaJoinScriptFailed

Role: domaincontroller_master
Comment 20 Maximilian Janßen univentionstaff 2021-11-26 11:25:32 CET
reported again: 021042121000286
Version: 4.4-7 errata958 (Blumenthal)
Comment 21 Maximilian Janßen univentionstaff 2021-11-26 13:53:33 CET
reported again: 2021032221000259
Version: 4.4-7 errata924 (Blumenthal)
Comment 22 Maximilian Janßen univentionstaff 2021-11-26 14:12:09 CET
reproted again: 2021031621000261
Version: 4.4-7 errata910 (Blumenthal)
Comment 23 Maximilian Janßen univentionstaff 2021-12-15 11:27:52 CET
reported again: 2021121421000631
Version: 5.0-0 errata174