Possible reason for f5a0ccc228ce1ef failure

[Volker Lendecke]

On Tue, Mar 22, 2016 at 04:47:13PM +0100, Michael Adam wrote:
> Speaking of the fix: Why is the member winbind socket
> pointing at the DC's winbind? Is that a bug in our
> selftest environment? After all, the socket of the

This is something that I don't question. This is test magic that I
don't really know to touch. Someone designing the tests put this in. I
see it as questionable too, but git blame does not give sufficient
information about who to ask, so I just work around this.

> DC's winbind socket should be under (e.g.) st/ad_dc/ while
> the member's winbind should be under st/ad_member/ ?
> *scratching my head*... :-)

Right. But this is not what is happening. I put a sleep into the join
code and I found

SELFTEST_WINBINDD_SOCKET_DIR=/memdisk/vlendec/manual/b665213/samba/bin/ab/nt4_dc/winbindd

in the environment for the following join command:

./bin/net join -s /memdisk/vlendec/manual/b665213/samba/bin/ab/nt4_member/lib/server.conf SAMBA-TEST member -Uvlendec

See that the join command is pointed at the nt4_member conf, but the
winbind to be used is the DC's winbind. I don't know who designed
this, but to me it is at least a clumsy way to allocate a rid for
BUILTIN\Administrators that the join implicitly creates.

My patch does

diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index 5dc4b17..4ff081a 100755
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -315,6 +315,7 @@ sub setup_nt4_member($$$)
        security = domain
        server signing = on
        dbwrap_tdb_mutexes:* = yes
+        idmap config * : range = 200001-300000
        ${require_mutexes}
 ";
        my $ret = $self->provision($prefix,

as a workaround, but that then also fails due to the unexpected
success. This is just a very, very closely knit gordian knot that I
don't really dare touching without asking. It took me three full days
to find this, so I am close to just giving up and not touch idmapping
again.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de