Description Arvid Requate 2023-01-19 12:51:24 CET

In a customer environment with AD membermode configuration the package univention-samba was uninstalled (maybe because the app Agorum wants to claim the SMB ports) and that will break server password change in a subtle way, as the code that actually changes the password in AD is currently located in:

services/univention-samba/server_password_change.d/univention-samba

The central lines of code are:
==================
        # change password on ad in member mode
        if samba_role == 'memberserver' and univention.lib.admember.is_localhost_in_admember_mode(ucr=ucr):
                cmd = ['/usr/bin/net', 'ads', 'password', '-P']
                cmd.append('%s$' % ucr.get('hostname', '').upper())
                cmd.append(machine_password)
                process = subprocess.Popen(cmd)
                process.wait()
==================

As discussed with Support and Julia, we need to move the admember specific parts of that code to a new location. I propose this location:

services/univention-ad-conector/server_password_change.d/univention-admember