samba 4.7.0 AD DC: FSMO roles transfer error

[Daniele Dario]

Mhh.

On mer, 2017-10-11 at 19:11 +0100, Rowland Penny via samba-technical
wrote:
> On Wed, 11 Oct 2017 20:03:03 +0200
> Daniele Dario <d.dario76 at gmail.com> wrote:
> 
> > Hi Rowland,
> > the DCs are both local and running on ubuntu 16.04 x64.
> > 
> > The timeout problem disappear if I put a second delay between transfer
> > calls.
> > 
> > The other error happens exactly when transfer dns roles is performed
> > and adding the import seems to fix the issue.
> > 
> > Daniele
> 
> sudo apt-get install python
> 
> Might be a good idea, Just checked and Ubuntu 16.04 comes with python
> 3.5.1 by default and the whilst the Samba python code is being ported
> to python 3, you still need python 2.7
> 
> Rowland
> 

As far as I can see, there are both installed or am I missing something?

root at kdc02:~# apt list -a python3.5
Listing... Done
python3.5/xenial-updates,now 3.5.2-2ubuntu0~16.04.3 amd64 [installed]
python3.5/xenial-security 3.5.2-2ubuntu0~16.04.1 amd64
python3.5/xenial 3.5.1-10 amd64

root at kdc02:~# apt list -a python2.7
Listing... Done
python2.7/xenial-updates,xenial-security,now 2.7.12-1ubuntu0~16.04.1
amd64 [installed,automatic]
python2.7/xenial 2.7.11-7ubuntu1 amd64

Same on kdc01.

My python is not as good as I would but AFAIK if I want to address
samba.drs_utils this means drs_utils has to be something visible inside
samba but it isn't so I think it is needed to add the line
import samba.drs_utils

About the timeout error: the two DCs are local and traffic on LAN was
normal. I had just updated to 4.7.0 the first DC when tried to transfer
the roles to it before upgrading the other one.

Adding a timeout between transfers allowed to move the roles from one to
the other and vice-versa without timeouts reliably.

Daniele.