[Samba] Error with samba-tool rodc preload

[MORILLO Jordi]

Hi everybody,

I'm making a POC with samba4 RODC I had problem with preload command.
Setup was a fresh 4.1.6 ADS install and a  4.1.6 RODC.
All is working fine except account preload :

root at smbrodc:~# samba-tool rodc preload m.brant --server=smbdc.gnutopya.local -U administrator
Password for [GNUTOPYA\administrator]:
Replicating DN CN=Mike BRANT,OU=Users,OU=Rouen,DC=gnutopya,DC=local
ERROR(<type 'exceptions.TypeError'>): uncaught exception - __init__() takes exactly 6 arguments (5 given)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/rodc.py", line 94, in run
    repl = drs_Replicate("ncacn_ip_tcp:%s[seal,print]" % server, lp, creds, local_samdb)
A transaction is still active in ldb context [0x1434180] on tdb:///var/lib/samba/private/sam.ldb


After reading Michael Brown post (https://lists.samba.org/archive/samba-technical/2013-November/096322.html), patched rodc.py give me another error :

root at smbrodc:~# samba-tool rodc preload m.brant --server=smbdc.gnutopya.local -U administrator
Password for [GNUTOPYA\administrator]:
Replicating DN CN=Mike BRANT,OU=Users,OU=Rouen,DC=gnutopya,DC=local
ERROR(runtime): Error replicating DN CN=Mike BRANT,OU=Users,OU=Rouen,DC=gnutopya,DC=local - (8453, 'WERR_DS_DRA_ACC   ESS_DENIED')
A transaction is still active in ldb context [0x23e5950] on tdb:///var/lib/samba/private/sam.ldb

All Microsoft Best Practive are respected (RODC group with computers and users account, Password Replication Policy....)

What is the actual state of RODC preloading ? Is there another patch available ?

Thanks for your great job