Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-20897

samba-gpupdate tries to fetch a sitename for the machine and fails

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Major Major
    • rhel-9.5
    • rhel-9.4
    • samba
    • samba-4.20.2-2.el9
    • None
    • Low
    • rhel-sst-idm-sssd
    • ssg_idm
    • 0
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None

      https://bugzilla.samba.org/show_bug.cgi?id=15548 

      What were you trying to do that didn't work?

      samba-gpupdate --rsop fails if machine is not in a site

      Please provide the package NVR for which bug is seen:

      samba-4.19.3-100

       

      If you install an AD DC with Certificate Server and then just join a domain member, samba-gpupdate doesn't work.

      It fails to find the site name.

      [root@ip-10-0-192-159 ~]# /usr/sbin/samba-gpupdate --rsop
      ...
      Traceback (most recent call last):
        File "/usr/lib64/python3.9/site-packages/samba/gp/gpclass.py", line 764, in site_dn_for_machine
          site_name = c.netr_DsRGetSiteName(hostname)
      samba.WERRORError: (1210, 'WERR_INVALID_COMPUTERNAME')

      During handling of the above exception, another exception occurred:

      Traceback (most recent call last):
        File "/usr/sbin/samba-gpupdate", line 131, in <module>
          rsop(lp, creds, store, gp_extensions, username, opts.target)
        File "/usr/lib64/python3.9/site-packages/samba/gp/gpclass.py", line 1041, in rsop
          gpos = get_gpo_list(dc_hostname, creds, lp, username)
        File "/usr/lib64/python3.9/site-packages/samba/gp/gpclass.py", line 869, in get_gpo_list
          site_dn = site_dn_for_machine(samdb, dc_hostname, lp, creds, username)
        File "/usr/lib64/python3.9/site-packages/samba/gp/gpclass.py", line 772, in site_dn_for_machine
          raise ldb.LdbError(ldb.ERR_NO_SUCH_OBJECT,
      _ldb.LdbError: (32, 'site_dn_for_machine: no result')
      signed SMB2 message (sign_algo_id=1)

              anschnei@redhat.com Andreas Schneider
              dkarpele@redhat.com Denis Karpelevich
              asn@redhat.com asn@redhat.com (Inactive)
              Denis Karpelevich Denis Karpelevich
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: