Koozali.org: home of the SME Server

SME Recent horde Update causes all network computers to..

hackersoft

SME Recent horde Update causes all network computers to..
« on: December 07, 2006, 07:45:07 AM »
This was a big headache for me after updating with the latest
SME Recent horde Update which causes all my network computers to disengage from the domain.

The effect, I have to redo all permissions settings for 400 users in our Windows 2003 R2 that's acting as our File Server. Not only that, users can no longer logon to any computers by using their user names.

Is there anything in the update that might have caused it to happen? It now gives me a nerve to update my SME Box to the latest if that will happen again. Too much for an experience. I've wasted so much time reconnecting all computers to the updated SME Domain Controller.

I hope that won't happen again the next time I update my SME Box...

 :(  :(  :(

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: SME Recent horde Update causes all network computers to.
« Reply #1 on: December 07, 2006, 04:01:01 PM »
Quote from: "hackersoft"
This was a big headache for me after updating with the latest


Please use the Bug Tracker link above.

hackersoft

SME Recent horde Update causes all network computers to..
« Reply #2 on: December 07, 2006, 04:22:03 PM »
Ok, submitted to bug tracker....
Just a friendly advice to SME users... I've learned my lessons now, don't ever update your Production SME acting as a Primary Domain Controller if you received an important update notification or the same will happen to your network. You should have a dummy system and perform the updates from there... If nothing bad happen, continue with the update.

Bug Tracker Number: 2141

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: SME Recent horde Update causes all network computers to.
« Reply #3 on: December 07, 2006, 06:13:27 PM »
Quote from: "hackersoft"
This was a big headache for me after updating with the latest
SME Recent horde Update which causes all my network computers to disengage from the domain.


The only "horde" updates I'm aware of are in the smeserver-testing repository. They shouldn't be used in production servers until they have been verified and released.

Instead of warning people against horde updates you should be warning people about using unverified updates on production servers. :-)

Offline mdo

  • *
  • 355
  • +0/-0
SME Recent horde Update causes all network computers to..
« Reply #4 on: December 07, 2006, 06:28:22 PM »
I suspect hackersoft means this recent update for horde (?):

e-smith-horde.noarch 1.12.0-05 smeupdates

The changelog shows:
* Wed Dec 06 2006 John H. Bennett III <bennettj@johnbennettservices.com> 1.12.0-05

- Restrict access to horde scripts directory [SME: 2136]

I cannot see how that could affect Samba's PDC functionality at all?
Michael
...

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
SME Recent horde Update causes all network computers to..
« Reply #5 on: December 07, 2006, 07:28:53 PM »
Quote from: "mdo"

I cannot see how that could affect Samba's PDC functionality at all?


See followup in the bug tracker. I suspect "signal-event post-upgrade ; signal-event reboot" has broken something. Note also that a significant number of contribs were installed.

Offline kruhm

  • *
  • 680
  • +0/-0
SME Recent horde Update causes all network computers to..
« Reply #6 on: December 11, 2006, 01:55:54 AM »
Possibly your servers are arguing over which is the PDC. Check to see if the DNS service is running on your 2003. Also note which is providing the DHCP.

hackersoft

SME Recent horde Update causes all network computers to..
« Reply #7 on: December 13, 2006, 04:43:41 PM »
@kruhm
Probably not the case... Win2k3 is joined to the SME PDC and is only acting as a file server.

It's not only the File Server that has the problem authenticating from SME, all client computers connected to the domain can no longer authenticate. I suspect, after I post-upgrade and rebooted, the system certificate was regenerated and that might have caused the problem.

All clients IPs are manually configured and I don't implement DHCP.