Univention Bugzilla – Bug 56794
UCS@school Slave join during the installation is not possible - ucs-school-replica is not going to be installed
Last modified: 2023-11-29 14:56:14 CET
Created attachment 11139 [details] join.log My test systems: root@ucs5master:~/univention-support# univention-app info UCS: 5.0-5 errata871 Installed: ucsschool=5.0 v4 Upgradable: root@ucs5master:~/univention-support# ucr get server/role domaincontroller_master root@Buggyschool:~# univention-app info UCS: 5.0-5 errata871 Installed: ucsschool=5.0 v4 Upgradable: root@Buggyschool:~# ucr get server/role domaincontroller_slave The univention-join of a replica node/school slave is not possible if it is done via the installation wizard. If the checkbox "join during installation" is checked, the following error occurs every time. I attached the join.log and the config-registry.replog from the replica-node /school-slave. If you need more information or access to the test system, just contact me. Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: ucs-school-replica : Depends: univention-s4-connector (>= 6.0.128-24) but it is not going to be installed or univention-samba-slave-pdc but it is not installable W: --force-yes is deprecated, use one of the options starting with --allow instead. E: Unable to correct problems, you have held broken packages. Setting repository/online File: /etc/apt/mirror.list File: /etc/apt/sources.list.d/15_ucs-online-version.list File: /etc/apt/sources.list.d/20_ucs-online-component.list ERROR: join/pre-joinscripts hook /tmp/tmpfg71wzfc/tmpxfr2m6a4 failed. ************************************************************************** * Join failed! * * Contact your system administrator * ************************************************************************** * Message: Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- join/pre-joinscripts failed, see /var/log/univention/join.log
Created attachment 11140 [details] config-registry.replog
Customer affected: 2023103021000164 UCS: 5.0-5 errata857 Installed: ucsschool=5.0 v4
Workaround or normal workflow: During installation, uncheck the "Join during installation" box. Once the system is fully installed and upgraded to the latest version, perform the join manually via terminal. Login as root to the ucs@school slave and use following command: univention-join
686c9cb02 | samba-ad-dc depends on specific version of samba-dsdb-modules f7aed51ab6 | Advisory update
UCS 5.0-5 without samba4 app (but some old samba-dsdb-modules installed) + internal errata5.0-5 repo univention-samba4 still fails with $ apt-get -s install univention-samba4 univention-samba4 : Hängt ab von: samba-dsdb-modules (>= 2:4.16.2-1A~5.0.0.202207191731) soll aber nicht installiert werden also samba $ apt-get -s install samba ... Die folgenden Pakete werden ENTFERNT: samba-dsdb-modules samba-ad-dc is fine $ apt-get -s install samba-ad-dc ... Die folgenden Pakete werden aktualisiert (Upgrade): ... samba-dsdb-modules samba-libs smbclient
As discussed, let's update this dependency: 8a2ff533ae | Make univention-samba4 depend on samba-ad-dc I also checked the history of the upstream Debian packaging git and there is this statement, which confirms our plan: "To use samba as an Active Directory domain controller (AD DC), please install samba-ad-dc package."
OK - installation of univention-samba4 (with samba-dsdb-modules already installed) OK - installation of univention-samba OK - yaml
<https://errata.software-univention.de/#/?erratum=5.0x890> <https://errata.software-univention.de/#/?erratum=5.0x891>