Bug 49597 – UCS 4.4 AD-Takeover doesn't work with Windows 2003

Bug 49597 - UCS 4.4 AD-Takeover doesn't work with Windows 2003


Summary:	UCS 4.4 AD-Takeover doesn't work with Windows 2003

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	AD Takeover
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-06-05 15:52 CEST by Kevin Dominik Korte
Modified:	2019-06-07 11:50 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	6: Setup Problem: Issue for the setup process
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.274
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kevin Dominik Korte

2019-06-05 15:52:35 CEST

Currently, the AD Takeover of Windows 2003 Servers fails. The Log File contains the following error 

2019-05-29 17:26:19,220 Failed to commit objects: DOS code 0x000021bf
2019-05-29 17:26:19,319 Could not find machine account in secrets database: 

The Error is known at Samba https://lists.samba.org/archive/samba/2018-June/216548.html

We should either fix the error in UCS or remove Windows Server 2003 Support from the Documentation.

Comment 1 Arvid Requate

2019-06-06 20:20:13 CEST

As discussed and succesfully tested by you, the takover works with Samba 4.7 (UCS 4.3-4 before Errata 510, e.g. installed directly from the iso w/o updating), so there is a supported workaround until 4.3-4 goes out of maintenance.

Looks like Samba 4.10 chokes upon a broken linked attribute or something like that on the AD-Server. Is there a dbcheck for AD? That could be helpful. samba-tool only works against ADs with Samba capabilities.

Comment 2 Arvid Requate

2019-06-06 20:20:54 CEST

Also: Windows 2003 or 2003 R2?