Lucid: need to run domainjoin-cli query all the time

[Marcus Paiva]

Binary package hint: likewise-open

Hello,
im using Ubuntu 10.04, Likewise 5.4.

I ve already joined my computer to ADC but dont manage to logon with DC user, unless entering with a local user and running "domainjoin-cli query". Then, i end the session and logon into DC.

All the time I reboot computer, have to do that.

thx,

[Gerald Carter (coffeedude.jerry)]

Not seeing this behaviour locally in local testing. Sounds like some processes are starting at boot time. Please attach teh status of "ps guaxf" and lw-get-status after booting but before running "domainjoin-cli query"

[Marcus Paiva (mpaivac)]

Hi,
ps output is attached.

lw-get-status
Failed to query status from LSA service. Error code 2
(ERROR_FILE_NOT_FOUND).
Unknown error

After domainjoin-cli query

lw-get-status
LSA Server Status:

Compiled daemon version: 5.0.0.0
Packaged product version: 5.4.0.42111
Uptime: 49710 days 6 hours 24 minutes 53 seconds

[Authentication provider: lsa-activedirectory-provider]

    Status: Online
    Mode: Un-provisioned
    Domain: LASALLE
    Forest: lasalle
    Site: Default-First-Site-Name
    Online check interval: 300 seconds
    [Trusted Domains: 1]

    [Domain: LASALLE]

        DNS Domain: lasalle
        Netbios name: LASALLE
        Forest name: lasalle
        Trustee DNS name:
        Client site name: Default-First-Site-Name
        Domain SID: S-1-5-21-823518204-688789844-1060284298
        Domain GUID: 30c9c6df-f5be-504d-bd81-b90dacc64c87
        Trust Flags: [0x001d]
                          [0x0001 - In forest]
                          [0x0004 - Tree root]
                          [0x0008 - Primary]
                          [0x0010 - Native]
        Trust type: Up Level
        Trust Attributes: [0x0000]
        Trust Direction: Primary Domain
        Trust Mode: In my forest Trust (MFT)
        Domain flags: [0x0001]
                          [0x0001 - Primary]

        [Domain Controller (DC) Information]

            DC Name: ADC00ABL.lasalle
            DC Address: 10.1.0.1
            DC Site: Default-First-Site-Name
            DC Flags: [0x000001fc]
            DC Is PDC: no
            DC is time server: yes
            DC has writeable DS: yes
            DC is Global Catalog: yes
            DC is running KDC: yes

[Authentication provider: lsa-local-provider]

    Status: Online
    Mode: Local system

2010/5/10 Gerald Carter <email address hidden>

> Not seeing this behaviour locally in local testing. Sounds like some
> processes are starting at boot time. Please attach teh status of "ps
> guaxf" and lw-get-status after booting but before running "domainjoin-
> cli query"
>
> ** Changed in: likewise-open (Ubuntu)
> Status: New => Incomplete
>
> ** Changed in: likewise-open (Ubuntu)
> Assignee: (unassigned) => Gerald Carter (coffeedude.jerry)
>
> --
> Lucid: need to run domainjoin-cli query all the time
> https://bugs.launchpad.net/bugs/578247
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “likewise-open” package in Ubuntu: Incomplete
>
> Bug description:
> Binary package hint: likewise-open
>
> Hello,
> im using Ubuntu 10.04, Likewise 5.4.
>
> I ve already joined my computer to ADC but dont manage to logon with DC
> user, unless entering with a local user and running "domainjoin-cli query".
> Then, i end the session and logon into DC.
>
> All the time I reboot computer, have to do that.
>
>
> thx,
>
> To unsubscribe from this bug, go to:
>
> https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/578247/+subscribe
>

[Marcos Saraiva (msaraiva)]

Gerald, i can confirm this, it's also happening on my system after upgrading to the latest ppa (ppa5). Running "strace lw-enum-users" i can see it dies here:

connect(3, {sa_family=AF_FILE, path="/var/lib/likewise-open/.lsassd"}, 110) = -1 ENOENT (No such file or directory)

That's why running "domainjoin-cli query" fixes it, because the file above gets created.

[Marcus Paiva (mpaivac)]

Hi,
yeah. when i boot the computer, krb5cc_lass and .lsassd files are missing in
/var/lib/likewise-open.
After running "domainjoin-cli query" they are created.

thx

2010/5/10 Marcos Saraiva <email address hidden>

> Gerald, i can confirm this, it's also happening on my system after
> upgrading to the latest ppa (ppa5). Running "strace lw-enum-users" i
> can see it dies here:
>
> connect(3, {sa_family=AF_FILE, path="/var/lib/likewise-open/.lsassd"},
> 110) = -1 ENOENT (No such file or directory)
>
> That's why running "domainjoin-cli query" fixes it, because the file
> above gets created.
>
> --
> Lucid: need to run domainjoin-cli query all the time
> https://bugs.launchpad.net/bugs/578247
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “likewise-open” package in Ubuntu: Incomplete
>
> Bug description:
> Binary package hint: likewise-open
>
> Hello,
> im using Ubuntu 10.04, Likewise 5.4.
>
> I ve already joined my computer to ADC but dont manage to logon with DC
> user, unless entering with a local user and running "domainjoin-cli query".
> Then, i end the session and logon into DC.
>
> All the time I reboot computer, have to do that.
>
>
> thx,
>
> To unsubscribe from this bug, go to:
>
> https://bugs.launchpad.net/ubuntu/+source/likewise-open/+bug/578247/+subscribe
>

[Erlend Viddal (openid-eviddal)]

I can confirm this is still the case with all latest updates applied.

My temporary fix is to add the domainjoin-cli query to rc.local and everything works fine.

[luizzmizz (luizzmizz)]

I was having the same issue, but then I did a lwsm list and saw lsass service not booted up:

--
root@(none):~# lw-get-status
Failed to query status from LSA service. Error code 2 (ERROR_FILE_NOT_FOUND).

root@(none):/var/lib/likewise-open# lwsm list
lwreg running (standalone: 935)
dcerpc stopped
eventlog stopped
lsass stopped
lwio stopped
netlogon running (standalone: 1002)
npfs stopped
pvfs stopped
rdr stopped
srv stopped
srvsvc stopped
--

As a temporary fix, personally, i would prefer doing a lwsm start lsass rather than the domainjoin-cli...

bye!