-P looks at the wrong secrets.tdb when running clustered. cli_credentials_set_machine_account(), which is called from popt_common_credentials_callback(), only uses dbwrap_local_open(). For the source3/ utilities it must use db_open() that also looks at ctdb-based databases.
Created attachment 17000 [details]
This fixes the problem for me. Not sure we want this in master, to me the solution looks really ugly, but giving time constraints I don't have a better solution
Thanks for looking into this! It won't win us a price, but that seems to be the best thing we can do atm. :) Looks good to me, give me a test and I'd push the same second. :)
Andreas, maybe you want to take a look as well?
(In reply to Ralph Böhme from comment #2)
> give me a test and I'd push the same second. :)
Correct me if I'm wrong but it *has* a test, doesn't it ? :-).
Swooooooossssshhhhh..... the sound of a patchset being pushed to autobuild.
This bug was referenced in samba master:
Created attachment 17001 [details]
Patch for 4.15 with cherry-pick info
Comment on attachment 17000 [details]
Reassigning to Jule for inclusion in 4.15.
Looks fine for me. Thanks for fixing!
Pushed to autobuild-v4-15-test.
This bug was referenced in samba v4-15-test:
Closing out bug report.
This bug was referenced in samba v4-15-stable (Release samba-4.15.3):