Bug 48917 - sysvol-sync fails because lock directory is owned 640 by some UCS slave ADDC
sysvol-sync fails because lock directory is owned 640 by some UCS slave ADDC
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 4.3
Other Linux
: P5 normal (vote)
: UCS 4.4-0-errata
Assigned To: Felix Botner
Arvid Requate
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2019-03-08 11:41 CET by Arvid Requate
Modified: 2019-04-08 17:34 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2019-03-08 11:41:10 CET
root@backup11:~# tail -f /var/log/univention/sysvol-sync.log
sh: 1: cannot create /var/lock/sysvol-sync-dir: Permission denied
2019-02-28 06:40:09 ERROR [master10] Could not aquire remote read lock after 30 seconds.
2019-02-28 06:40:09 ERROR [master10] Skipping sync to local sysvol!
sh: 1: cannot create /var/lock/sysvol-sync-dir: Permission denied
2019-02-28 06:45:14 ERROR [master10] Could not aquire remote read lock after 30 seconds.
2019-02-28 06:45:14 ERROR [master10] Skipping sync to local sysvol!


root@master10:~# ls -ld /var/lock/sysvol-sync-dir
-rw-r--r-- 1 slave12$ DC Slave Hosts 0 Feb 28 06:30 /var/lock/sysvol-sync-dir
Comment 1 Arvid Requate univentionstaff 2019-03-08 12:52:35 CET
It occurred in a domain that was updated from UCS 4.1 originally, so maybe it's just an artefact of an old bug that has already been fixed (bug not properly).
Comment 2 Felix Botner univentionstaff 2019-03-21 17:25:54 CET
Yes, this can happen if the file is not present on the upstream server. In this case get_remote_lock() creates the lock file with default permissions.

fixed in 

univention-samba4 72f8111531d7babe731f601d42c0a9909a9200b7
yaml 23a5e43afb32e0a8fee282d88dac673e71b75676
Comment 3 Arvid Requate univentionstaff 2019-03-26 22:09:01 CET
Ok.
Comment 4 Erik Damrose univentionstaff 2019-04-08 17:34:16 CEST
<http://errata.software-univention.de/ucs/4.4/35.html>