[PATCH] Allow posixUser LDAP attributes to be optional on classicupgrade

[Andrew Bartlett]

On Sun, 2012-11-11 at 13:58 +0200, Chirana Gheorghita Eugeniu Theodor
wrote:
> Hello,
> The patch seemed to work but now:
> 
> Reading WINS database
> Cannot open wins database, Ignoring: [Errno 2] No such file or directory:
> '/samba/s3/private/wins.dat'
> lpcfg_load: refreshing parameters from /samba/etc/smb.conf
> params.c:pm_process() - Processing configuration file "/samba/etc/smb.conf"
> Processing section "[globals]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> pm_process() returned Yes
> lpcfg_load: refreshing parameters from /samba/etc/smb.conf
> params.c:pm_process() - Processing configuration file "/samba/etc/smb.conf"
> Processing section "[global]"
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> pm_process() returned Yes
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -
> ProvisioningError: guess_names: Realm 'AVIAMOTORS.RO' must not be equal to
> short domain name 'AVIAMOTORS.RO'!
>   File "/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
> line 175, in _run
>     return self.run(*args, **kwargs)
>   File "/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py", line
> 1318, in run
>     useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
>   File "/samba/lib64/python2.6/site-packages/samba/upgrade.py", line 841,
> in upgrade_from_samba3
>     use_ntvfs=use_ntvfs, skip_sysvolacl=True)
>   File "/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
> line 1868, in provision
>     sitename=sitename, rootdn=rootdn)
>   File "/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
> line 560, in guess_names
>     raise ProvisioningError("guess_names: Realm '%s' must not be equal to
> short domain name '%s'!" % (realm, domain))
> The connection to the LDAP server was closed
> 
> 
> Is there anything related to my smb.conf?

So, it seems your old 'workgroup' was 'AVIAMOTORS.RO'?

We have this assertion in our provision code, not because it strictly is
prohibited by the AD structure, but because it usually is administrator
error or misunderstanding. 

Very few DNS domains also work as netbios workgroups, so this doesn't
come up often.

If this is genuinely how your existing domain is configured, then I
guess we will have to allow it to work somehow, probably by bypassing
the check in some cases. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org