Univention Bugzilla – Bug 55266
check_univention_samba_drs_failures logs exceptions causing cron emails
Last modified: 2024-02-14 14:02:55 CET
The exception handling of check_univention_samba_drs_failures sends an email via cron every 5 minutes in unknown conditions: (3221356597, 'The operation cannot be performed.') Traceback (most recent call last): File "/usr/share/univention-monitoring-client/scripts//check_univention_samba_drs_failures", line 78, in write_metrics consecutive_sync_failures = _CheckSambaDrsRepl().check() File "/usr/share/univention-monitoring-client/scripts//check_univention_samba_drs_failures", line 59, in check (info_type, info) = self.drsuapi.DsReplicaGetInfo(self.drsuapi_handle, 1, req1) samba.NTSTATUSError: (3221356597, 'The operation cannot be performed.') https://help.univention.com/t/univention-monitoring-client-throwing-exceptions-after-upgrade-to-5-0-2/20131/10 → we should either find out why this happens and fix it or just don't log it as error but as debug message. (The prior nagios check ignored the error as well).
I'm able to reproduce it: root@backup11:~# ucr set samba/debug/level='2' Setting samba/debug/level Multifile: /etc/samba/smb.conf root@backup11:~# /usr/share/univention-monitoring-client/scripts/check_univention_samba_drs_failures 2>&1 | wc -l 0 root@backup11:~# ucr set samba/debug/level='3' Setting samba/debug/level Multifile: /etc/samba/smb.conf root@backup11:~# /usr/share/univention-monitoring-client/scripts/check_univention_samba_drs_failures 2>&1 | wc -l 16 root@backup11:~# root@backup11:~# /usr/share/univention-monitoring-client/scripts/check_univention_samba_drs_failures ldb_wrap open of secrets.ldb GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'ncalrpc_as_system' registered GENSEC backend 'sasl-EXTERNAL' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'ntlmssp_resume_ccache' registered GENSEC backend 'http_basic' registered GENSEC backend 'http_ntlm' registered GENSEC backend 'http_negotiate' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered Using binding ncacn_ip_tcp:backup11.deadlock10.intranet[,seal] root@backup11:~#
Re: original bug: > → we should either find out why this happens and fix it or just don't log it as error but as debug message. (The prior nagios check ignored the error as well). Yes, we should find out the `The operation cannot be performed.` error. I could imagine that this was fallout from Bug 55486 / Bug 55595, because that caused samba-dcerpcd having issues. I think the second issue is a separate thing, but I'm fine with making that the goal of this bug.