Univention Bugzilla – Bug 35590
ucs-test samba should have detected Bug 35584 (testjoin?)
Last modified: 2023-03-25 06:40:46 CET
ucs-test samba should have detected Bug 35584. We should check how ucs-test -s samba (or samba-common) behaves in case samba/role is not set and add a test to check for this general kind of update problems. E.g. currently there seems to be not test simply running net rpc/ads testjoin, maybe that would help already. +++ This bug was initially created as a clone of Bug #35584 +++ univention-samba 8.0.19-10.476.201407281536 introduces "samba/role" as new UCR but the variable is not set on updated systems. This leads to broken NT domains after installation of errata 164 as winbind stops working: root@billy:~# wbinfo -U 2041 S-1-5-21-3980132504-3533172963-4083691310-5082 root@billy:~# wbinfo -S S-1-5-21-3980132504-3533172963-4083691310-5082 2041 root@billy:~# wbinfo -n janis failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND Could not lookup name janis [2014/08/08 09:26:36.681600, 5] ../source3/winbindd/winbindd_lookupname.c:104(winbindd_lookupname_recv) Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED root@billy:~# net rpc testjoin net_rpc_join_ok: failed to get schannel session key from server BILLY for domain KNUT. Error was NT_STATUS_ACCESS_DENIED Join to domain 'KNUT' is not valid: NT_STATUS_ACCESS_DENIED
(In reply to Arvid Requate from comment #0) > ucs-test samba should have detected Bug 35584. We should check how ucs-test > -s samba (or samba-common) behaves in case samba/role is not set and add a > test to check for this general kind of update problems. E.g. currently > there seems to be not test simply running net rpc/ads testjoin, maybe that > would help already. r55864: * 50_samba/11net_rpc_testjoin: perform a 'net rpc testjoin' (Bug #35590). Test simply performs the 'net rpc testjoin' and it will fail if the UCR 'samba/role' is unset. Plus there already a test 50_samba/10ucr_samba_role that checks if the 'samba/role' is set.
The test case failed on a member server which is joined into a Samba 4 domain: http://jenkins.knut.univention.de:8080/job/UCS-3.2/job/UCS-3.2-4/job/Autotest%20MultiEnv/38/SambaVersion=s4,Systemrolle=member/testReport/50_samba/11net_rpc_testjoin/test/ http://jenkins.knut.univention.de:8080/job/UCS-4.0/job/UCS-4.0-0/job/Autotest%20MultiEnv/SambaVersion=s4,Systemrolle=member/102/testReport/50_samba/11net_rpc_testjoin/test/ In this case "net ads" must be used instead of "net rpc".
(In reply to Stefan Gohmann from comment #2) > In this case "net ads" must be used instead of "net rpc". r57243: * Bug #35590: 50_samba/12net_ads_testjoin: testjoin for memberserver; 50_samba/11net_rpc_testjoin: don't run the test on memberserver.
r57275: * Bug #35590: 50_samba/12net_testjoin_memberserver: use net ads if it's a Samba 4 domain and net rpc in other case.
Code review ok and works in Jenkins.