Bug 42023 - Samba join as member server fails
Samba join as member server fails
Status: CLOSED WORKSFORME
Product: UCS@school
Classification: Unclassified
Component: Samba
UCS@school 4.1 R2
Other Linux
: P5 normal (vote)
: ---
Assigned To: Lukas Oyen
:
Depends on:
Blocks: 40321
  Show dependency treegraph
 
Reported: 2016-08-18 07:00 CEST by Stefan Gohmann
Modified: 2023-06-12 15:39 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.137
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2016-08-18 07:00:39 CEST
I'm not sure if it is a problem within our Jenkins environment but the join of a memberserver fails:

--------------------------------------------------------------------------------
Configure 26univention-samba.inst Wed Aug 17 18:43:51 EDT 2016
2016-08-17 18:43:51.281556360-04:00 (in joinscript_init)
Create samba/role
Multifile: /etc/samba/smb.conf
Create samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping the Winbind daemon: winbind.
Create samba/user
Create samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=member2043,cn=computers,ou=School2,dc=autotest204,dc=local" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Stopping Samba daemons: nmbd smbd.
Starting Samba daemons: nmbd smbd.
Object modified: cn=member2043,cn=computers,ou=School2,dc=autotest204,dc=local
Failed to join domain: failed to find DC for domain AUTOTEST204
Failed to join domain: failed to lookup DC info for domain 'AUTOTEST204' over rpc: The connection was refused
NTLMSSP packet check failed due to short signature (0 bytes)!
NTLMSSP NTLM2 packet check failed due to invalid signature!
Failed to join domain: failed to lookup DC info for domain 'AUTOTEST204' over rpc: Access denied
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
Wed Aug 17 18:44:05 EDT 2016: finish /usr/share/univention-join/univention-join
--------------------------------------------------------------------------------

The scenario is one DC master, one school slave and the member server joins into the school slave at least on the Samba level.
The scenario is part of the school manual:
http://docs.software-univention.de/ucsschool-handbuch-4.1R2.html#school:performance:additionalMemberserver

The Jenkins test job:
http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Multiserver/SambaVersion=s4-school-only-with-memberserver/
Comment 1 Stefan Gohmann univentionstaff 2016-08-18 07:00:58 CEST
Arvid, please have a look.
Comment 2 Arvid Requate univentionstaff 2016-08-18 21:29:30 CEST
Hmm, the messages

rpc: The connection was refused
NTLMSSP packet check failed due to short signature (0 bytes)!

look strange. I found them here as well:

https://bugzilla.samba.org/show_bug.cgi?id=11841


I tried with a 4.1-3 erratalevel 237 Master & Memberserver (unjoined) but couldn't reproduced it at first attempt.
Comment 3 Arvid Requate univentionstaff 2016-08-18 21:32:21 CEST
Should have read the small print first, I'll test again with that specific scenario.
Comment 4 Lukas Oyen univentionstaff 2016-12-19 16:33:45 CET
Unable to reproduce on UCS 4.1 errata 360 with UCS@school 4.1 R2 v9. The Jenkins tests are running again aswell.