Bug 55767

Summary:	the system diagnostic is returning errors on 5.0.3
Product:	UCS	Reporter:	Telirand <itdept_head>
Component:	Samba4	Assignee:	Samba maintainers <samba-maintainers>
Status:	NEW ---	QA Contact:	Samba maintainers <samba-maintainers>
Severity:	major
Priority:	P5
Version:	UCS 5.0
Target Milestone:	---
Hardware:	amd64
OS:	All
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Telirand 2023-03-01 03:39:36 CET

We were testing a normal domain and a read only server.

We followed the preparation of setting the read only flags for samba as per the manual.

on running system diagnostic on the READ ONLY system we had the following:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/__init__.py", line 277, in execute
    ret = execute(umc_module, **kwargs)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 150, in run
    problems = list(drs.replication_problems())
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 102, in replication_problems
    for replica_info, neighbour in self.neighbours():
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 97, in neighbours
    (info_type, info) = self._replica_info(replica_info_direction)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/41_samba_tool_showrepl.py", line 92, in _replica_info
    (info_type, info) = self.drsuapi.DsReplicaGetInfo(self.handle, 1, req1)
samba.WERRORError: (8453, 'WERR_DS_DRA_ACCESS_DENIED')


There is NO error running it on teh R/W master domain