http://bugzilla.novell.com/show_bug.cgi?id=515991 Paul Rehme changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User locilka@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c1 Lukas Ocilka changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|locilka@novell.com |jsuchome@novell.com --- Comment #1 from Lukas Ocilka 2009-06-24 07:33:30 MDT --- Nothing has been changed for quite a long time in add_machine script, handing over to YaPI maintainer. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User jsuchome@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c3 --- Comment #3 from Jiří­ Suchomel 2009-06-24 07:41:47 MDT --- Created an attachment (id=300063) --> (http://bugzilla.novell.com/attachment.cgi?id=300063) patch for add_machine.ycp -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User P.rehme@physik.uni-stuttgart.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c5 Paul Rehme changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|P.rehme@physik.uni-stuttgar | |t.de | --- Comment #5 from Paul Rehme 2009-06-24 07:55:33 MDT --- Still no success. adding a machine to ldap via add_machine <machine-name>$ works. Joining afterwards to the domain works. BUT: Just joining the domain from linux/windows doesn't work. It says, that the machine account could not be created. Also there is no ldap entry afterwards. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User jsuchome@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c7 --- Comment #7 from Jiří­ Suchomel 2009-09-03 02:52:54 MDT --- Ping... any news? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User P.rehme@physik.uni-stuttgart.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c9 --- Comment #9 from Paul Rehme 2009-09-17 09:59:34 MDT --- Hi, net join DOMAIN fails when executed once. If one execute the command a second time you have success. After the 1st try a ldap entry is created. /var/log/messages says: 1st try: Sep 17 17:57:27 haraldtest2 smbd[1592]: [2009/09/17 17:57:27, 0] rpc_server/srv_netlog_nt.c:get_md4pw(306) Sep 17 17:57:27 haraldtest2 smbd[1592]: get_md4pw: Workstation HARALDTEST2$: no account in domain Sep 17 17:57:27 haraldtest2 smbd[1592]: [2009/09/17 17:57:27, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(502) Sep 17 17:57:27 haraldtest2 smbd[1592]: _netr_ServerAuthenticate2: failed to get machine password for account HARALDTEST2$: NT_STATUS_ACCESS_DENIED Sep 17 17:57:27 haraldtest2 smbd[1592]: [2009/09/17 17:57:27, 0] rpc_server/srv_netlog_nt.c:get_md4pw(306) Sep 17 17:57:27 haraldtest2 smbd[1592]: get_md4pw: Workstation HARALDTEST2$: no account in domain Sep 17 17:57:27 haraldtest2 smbd[1592]: [2009/09/17 17:57:27, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(502) Sep 17 17:57:27 haraldtest2 smbd[1592]: _netr_ServerAuthenticate2: failed to get machine password for account HARALDTEST2$: NT_STATUS_ACCESS_DENIED 2nd try: Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:17 haraldtest2 smbd[1691]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] rpc_server/srv_netlog_nt.c:get_md4pw(322) Sep 17 17:58:17 haraldtest2 smbd[1691]: get_md4pw: Workstation HARALDTEST2$: account is not a trust account Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(502) Sep 17 17:58:17 haraldtest2 smbd[1691]: _netr_ServerAuthenticate2: failed to get machine password for account HARALDTEST2$: NT_STATUS_NO_TRUST_SAM_ACCOUNT Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:17 haraldtest2 smbd[1691]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] rpc_server/srv_netlog_nt.c:get_md4pw(322) Sep 17 17:58:17 haraldtest2 smbd[1691]: get_md4pw: Workstation HARALDTEST2$: account is not a trust account Sep 17 17:58:17 haraldtest2 smbd[1691]: [2009/09/17 17:58:17, 0] rpc_server/srv_netlog_nt.c:_netr_ServerAuthenticate2(502) Sep 17 17:58:17 haraldtest2 smbd[1691]: _netr_ServerAuthenticate2: failed to get machine password for account HARALDTEST2$: NT_STATUS_NO_TRUST_SAM_ACCOUNT Sep 17 17:58:20 haraldtest2 smbd[1692]: [2009/09/17 17:58:20, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:20 haraldtest2 smbd[1692]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:20 haraldtest2 smbd[1692]: [2009/09/17 17:58:20, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:20 haraldtest2 smbd[1692]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:20 haraldtest2 smbd[1692]: [2009/09/17 17:58:20, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:20 haraldtest2 smbd[1692]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:20 haraldtest2 smbd[1692]: [2009/09/17 17:58:20, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:20 haraldtest2 smbd[1692]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:20 haraldtest2 smbd[1692]: [2009/09/17 17:58:20, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:20 haraldtest2 smbd[1692]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ Sep 17 17:58:21 haraldtest2 smbd[1694]: [2009/09/17 17:58:21, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) Sep 17 17:58:21 haraldtest2 smbd[1694]: pdb_get_group_sid: Failed to find Unix account for haraldtest2$ -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User P.rehme@physik.uni-stuttgart.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c11 --- Comment #11 from Paul Rehme 2009-09-18 02:53:28 MDT --- The add_machine.ycp is pathced. Creating a machine account via "yast [..]/add_machine.ycp COMPUTER$" works fine. But if you want to join the domain via "net join DOMAINNAME" the first try fails (if the computer has no LDAP entry). After the first try the computer has a LDAP entry. If you then try to join the domain a second time via "net join DOMAINNAME" the comuper joins the domain succsessfully. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User boyang@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c14 Yang Bo changed: What |Removed |Added ---------------------------------------------------------------------------- Info Provider|samba-maintainers@SuSE.de |P.rehme@physik.uni-stuttgar | |t.de --- Comment #14 from Yang Bo 2009-09-26 21:12:26 MDT --- @Paul: what machine did you invoke the command "net join DOMAINNAME" from? The domain controller itself? Could you please provide log files on the domain controller according to description at http://en.opensuse.org/Bugs/Samba? Make sure you stop samba and delete all log files of samba before you perform the test and provide logs. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User danielstefanmader@web.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c16 --- Comment #16 from Daniel Mader 2009-10-23 05:13:48 MDT --- If I understand correctly, the joining of the domain always fails now on the first try during which the machine account is created. It doesn't matter if it's a Windows box (graphical dialog) or a Linux client (net join DOMAINNAME). The add_machine.ycp script works OK now after the patching, i.e. it properly creates an LDAP entry, no matter if invoked manually (yast (..)/add_machine.ycp machinename$) or triggered by Samba. I suspect this to be a Samba issue but I have no proof at all. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User danielstefanmader@web.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c18 --- Comment #18 from Daniel Mader 2009-10-24 09:50:09 MDT --- Created an attachment (id=324001) --> (http://bugzilla.novell.com/attachment.cgi?id=324001) /var/log/messages starting with a full services restart -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User jmcdonough@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c20 James McDonough changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |danielstefanmader@web.de --- Comment #20 from James McDonough 2009-10-29 09:03:40 MDT --- Can you try doing this with nscd turned off? I'm wondering if we have an issue there. The behavior of a second try working is usually a symptom of the old behavior before we flushed the nscd cache. In this case, we're trying to flush it, and despite the error message, it's claiming to work. THe error message itself is a bug, as it's examining the return code incorrectly (zero means success), but it doesn't cause a functional problem, only an incorrect log message. Can you even do this outside of samba at a shell? Just issue the add_machine.ycp command to add the machine, and immediately do a "getent passwd machinename$" (be sure to have the $) and see if it returns a passwd entry. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=515991 User danielstefanmader@web.de added comment http://bugzilla.novell.com/show_bug.cgi?id=515991#c21 Daniel Mader changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|danielstefanmader@web.de | --- Comment #21 from Daniel Mader 2009-11-09 03:54:55 MST --- Sorry for the delay. Stopping nscd does not change the behavior of the domain joining from a windows machine. Concerning the script: As I mentioned in the duplicate report, the add_machine.ycp script basically works: rioja:~ # /sbin/yast /usr/share/YaST2/data/add_machine.ycp lalalala$ [1]+ Done yast2 rioja:~ # getent passwd lalalala$ lalalala$:*:10125:100:lalalala$:/var/lib/nobody:/bin/false Since this affects our SLES11 production machine (with a paid license) I'm afraid I cannot continue with further testing, and I hope this bug gets more attention in the future :) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=515991 https://bugzilla.novell.com/show_bug.cgi?id=515991#c23 Joschi Brauchle changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joschibrauchle@gmx.de --- Comment #23 from Joschi Brauchle 2011-07-26 09:18:52 UTC --- BTW: As mentioned by Michael, the problems with add_machine.ycp persist with SLES11SP1! Once the script is patched, joining a domain from a Windows machine fails the FIRST time, but succeeds the SECOND time! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.