More KCC patches

Denis Cardon denis.cardon at tranquil-it-systems.fr
Wed Jun 10 15:12:38 MDT 2015


Hi Douglas and Andrew,

> On Wed, 2015-06-10 at 18:20 +1200, Douglas Bagnall wrote:
>> The final KCC patches from that unreasonable clump are here:
>>
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=shortlog;h=refs/heads/kcc-intersite-29
>>
>> They have all been reviewed by Garming, except for these few that have
>> changed since he looked:
>>
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=a97a02a
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=2b420a4
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=599cf22
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=e5bd139
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=54a9e09
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=c683228
>> http://git.catalyst.net.nz/gitweb?p=samba.git;a=commit;h=1be4d75
>>
>> Could someone please review?
>
> Thanks Douglas.  I reviewed the whole series in the office, so consider
> those 'Reviewed-by: Andrew Bartlett <abartlet at samba.org>', but we just
> need a second team reviewer for those linked above.
>
>> This leaves the old KCC in charge. At some point we would like to
>> switch over to the new KCC, but in the meantime we will only be
>> testing on specially selected victims. Any volunteers?
>
> Indeed, that is what we really need at this point.  We also need help
> from folks willing to submit sample network topologies of Samba or
> Windows networks.

Just to be sure, in order to test the new kcc, the only thing to add to 
smb.conf file is kccsrv:samba_kcc = true ?

I checked out the kcc-intersite-29 branch on a 2 samba DCs replicating 
the same domain (upgraded from 4.2.0):
  git clone git://git.catalyst.net.nz/samba.git
  git checkout kcc-intersite-29
  git branch
        kcc-intersite-28
      * kcc-intersite-29
        master
  ./configure
  make
  make install

Then change smb.conf with kccsrv:samba_kcc = true and restart samba

[root at srvads.tranq samba]# samba -V
Version 4.3.0pre1-GIT-46431e3

There is no visible regression, everything is working fine and 
replication is ok both ways.

However I have two issues when trying the new samba_kcc:

If I remove the connection object from the console "site and services 
active directory", and run samba_kcc by hand, I get 10 "loopback" 
replication connections automatically created... (cf. attachment). The 
mmc display looks coherent with what samba-tool drs showrepl says.

The test domain has seen almost all the samba releases from the late 
beta onward (and had quite a tumultuous life), so perhaps I'll try 
tomorow on a more pristine domain...

Another thing : if I delete all the automatically created connexion and 
then create the connexion by hand, replication is working fine, however, 
when running samba_kcc, I then get the following error :

[root at srvads.tranq samba]# samba_kcc
'module' object has no attribute 'replSchedule'

Taking a look at the drsblobs object :

 >>> drsblobs.replSchedule
Traceback (most recent call last):
   File "<console>", line 1, in <module>
AttributeError: 'module' object has no attribute 'replSchedule'
 >>> drsblobs
<module 'samba.dcerpc.drsblobs' from 
'/usr/local/samba/lib/python2.7/site-packages/samba/dcerpc/drsblobs.so'>
 >>> dir(drsblobs)
['AuthInfoClear', 'AuthInfoNT4Owf', .... , 'schedule', .... ]

The drsblobs object has a "schedule" attribute but not a "replSchedule", 
which is actually coherent with the ./librpc/idl/drsblobs.idl file from 
my checkout. Perhaps I have messed up with my git tree...

By the way, looking a the kcc computation logic code, it is really mind 
bloggling! Keep on the good job!

Cheers,

Denis



>
> Andrew Bartlett
>

-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Capture-11.png
Type: image/png
Size: 15065 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150610/389ee7ed/attachment.png>


More information about the samba-technical mailing list