Windows NTP client time sync failed

[DavidePrincipi]

Windows clients cannot synchronize their clock with a new installation of nethserver-dc (the local AD accounts provider).

Steps to reproduce

• Install a local AD account provider
• Join a Windows machine and launch the w32tm /resync command

Expected behavior

The client clock gets synchronized.

Actual behavior

The sync command fails.

Components

nethserver-dc-1.8.1-1.ns7.x86_64

---

Thanks to @syntaxerrormmm @lucagasparini @nrauso

[DavidePrincipi]

Workaround

The issue origin seems to be in the DC installation procedure. The install procedure does not fix the filesystem group owner of ${nsroot}/var/lib/samba/ntp_signd/ to the ntp group.

[root@server ~]# nsdc-run -e -- ls -ld /var/lib/samba/ntp_signd
drwxr-x--- 2 root ntp 20 Apr  6 20:45 /var/lib/samba/ntp_signd

Instead the upgrade procedure fixes it with the following action:

/etc/e-smith/events/nethserver-dc-update/S40nethserver-dc-fixchroot

Run it manually to fix the bug.

[nethbot]

in 7.9.2009/testing:

• nethserver-dc-1.8.1-1.1.g4cf652f.ns7.x86_64.rpm x86_64

[DavidePrincipi]

Test case 1

Check the new package correctly fixes an existing installation:

nsdc-run -e -- ls -ld /var/lib/samba/ntp_signd

Ownership must change from root:root to root:ntp

Test case 2

Check the bug is not reproducible in a new installation.

[nrauso]

Tested: VERIFIED

The package in testing fixes ownerships on both updated and new DC installations.

[nethbot]

in 7.9.2009/updates:

• nethserver-dc-1.8.2-1.ns7.x86_64.rpm x86_64