Bug 47254 - Singleserver: wrong service "S4 SlavePDC"
Singleserver: wrong service "S4 SlavePDC"
Status: NEW
Product: UCS@school
Classification: Unclassified
Component: Samba 4 - Slave PDC
UCS@school 4.3
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
:
Depends on: 47226 47234
Blocks:
  Show dependency treegraph
 
Reported: 2018-06-26 21:29 CEST by Sönke Schwardt-Krummrich
Modified: 2018-11-14 13:56 CET (History)
4 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2018-06-26 21:29:07 CEST
From bug 47234:
> Note for 4.2:
> The demoting does "fail" silently. As long as no one uses "--ask-pass --force" 
> for which there should be no reason on a master this should not be a problem.
> But at least one problem is that "univentionService: S4 SlavePDC" got added to 
> all masters since bug 41168.
> We might need to clean that up.

The joinscript "96univention-samba4slavepdc.inst" is automatically installed by the ucs-school-singlemaster meta package on a DC master in UCS@school single server environments.
The old version in 4.2 (and 4.3 up to the errata of bug 47234) failed silently when trying to demote the DC master but successfully added the wrong service at the DC master LDAP object.
When cleaning up the UCS@school meta packages, we should also clean up the univentionService at the DC master (if required).

+++ This bug was initially created as a clone of Bug #47234 +++

+++ This bug was initially created as a clone of Bug #47226 +++

Due to an added check (assert_dcaccount_and_bindpwd) the join script "96univention-samba4slavepdc.inst" now fails on master.

The script should only be executed on a school slave
-> move join script into ucs-school-slave and ucs-school-nonedu-slave.

96univention-samba4slavepdc.inst
98univention-samba4slavepdc-dns.inst