Description Florian Best 2016-03-14 07:25:19 CET

The change will be backported to UCS@school 4.0 R2.

+++ This bug was initially created as a clone of Bug #37484 +++

In a newly installed customer environment we had the following scenario:

* DC Master + UCS@school
* DC Backup + UCS@school
* DC Slave

The customer installed UCS@school also on the DC Slave and ran the UCS@school configuration wizard which failed with the following error:

> MODULE   ( ERROR ) : Failed to launch UMC query: ['/usr/sbin/umc-get', '-U', 'Administrator', '-y', '/tmp/tmpMEAg2R', '-s', 'master.schule.local', 'ucr', '-l', '-c', 'ldap/base', '-o', 'ldap/master/port']
> MODULE   ( WARN  ) : Could not query the LDAP base of the master system master.schule.local.
> MODULE   ( ERROR ) : Failed to get schoolinfo for school 'schule01': ('success': False, 'error': 'Der UMC-Server master.schule.local kann nicht erreicht werden.')

What was confusing is that manually executing the command "/usr/sbin/umc-get -U Administrator -y /tmp/adminpwd -s master.schule.local ucr -l -c ldap/base -o ldap/master/port" on the command line was successful.
Additionally 'everything else' was working (join, replication, ldapsearch, HTTPS)

With a higher debug level we were able to see this in the logfile:

> MODULE ( INFO    ) : Executing: /usr/sbin/umc-get -d 4 -U Administrator -y /tmp/tmpqsnvhw -s master.schulen.local ucr -l -o ldap/base -o ldap/master/port
> MODULE ( ERROR   ) : Failed to launch UMC query: ['/usr/sbin/umc-get', '-d', '4', '-U', 'Administrator', '-y', '/tmp/tmpqsnvhw', '-s', 'master.schulen.local', 'ucr', '-l', '-o', 'ldap/base', '-o', 'ldap/master/port']
> DEBUG_INIT                                               
> MAIN        ( PROCESS ) : Client: Setting up SSL configuration failed: []
> MAIN        ( PROCESS ) : Client: Communication will not be encrypted!
> PROTOCOL    ( INFO    ) : Sending UMCP AUTH REQUEST 142071238666879-1 
> MAIN        ( WARN    ) : Client: _recv: error on socket: [Errno 104] Connection reset by peer
>                                                                           
> MODULE      ( WARN    ) : Could not query the LDAP base of the master system master.schulen.local.

We checked the certificates (CA, master, slave) but they seem to be okay (valid, md5sums match on both systems). I can provide USI-archives for DC Master and DC Slave if necessary.