Attachment 9750 Details for Bug 47649 – management-console-module-diagnostic.log

management-console-module-diagnostic.log

management-console-module-diagnostic.log (text/x-log), 37.36 KB, created by Arvid Requate on 2018-11-21 22:10:45 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Arvid Requate

Created: 2018-11-21 22:10:45 CET

Size: 37.36 KB

patch

obsolete

>21.11.18 20:36:15.242  DEBUG_INIT
>21.11.18 20:36:17.978  MODULE      ( PROCESS ) : Loading python module.
>21.11.18 20:36:18.012  MODULE      ( PROCESS ) : Imported python module.
>21.11.18 20:36:18.013  MODULE      ( PROCESS ) : Module instance created.
>21.11.18 20:36:18.013  MODULE      ( PROCESS ) : Module socket initialized.
>21.11.18 20:36:18.032  MODULE      ( PROCESS ) : Setting user LDAP DN 'uid=Administrator,cn=users,dc=ar41i1,dc=qa'
>21.11.18 20:36:18.033  MODULE      ( PROCESS ) : Setting auth type to None
>21.11.18 20:36:18.033  MODULE      ( PROCESS ) : Initializing module.
>21.11.18 20:36:19.939  MODULE      ( PROCESS ) : Running 01_ssh_connection
>21.11.18 20:36:19.939  MODULE      ( PROCESS ) : This can be checked by running:  univention-ssh /etc/machine.secret "master10$"@fqdn echo OK
>21.11.18 20:36:19.947  MODULE      ( PROCESS ) : Running 54_sources_list_check
>21.11.18 20:36:19.947  MODULE      ( PROCESS ) :  Check by opening /etc/apt/sources.list.d/* and look for exceptions
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : Running 40_samba_tool_dbcheck
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : This can be checked by running samba-tool dbcheck
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : Running 55_user_migration
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : Checks if there are user objects which are not migrated by using /usr/share/univention-directory-manager-tools/univention-migrate-users-to-ucs4.3 --check
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : Running 03_check_notifier_replication
>21.11.18 20:36:19.948  MODULE      ( PROCESS ) : get id of ucr get ldap/master and check if var/lib/univention-directory-listener/notifier_id) is the same 
>21.11.18 20:36:19.952  MODULE      ( PROCESS ) : Running 32_security_limits
>21.11.18 20:36:19.952  MODULE      ( PROCESS ) : checks samba logfile /var/log/samba/log.smbd for "too many open files" messages 
> checks if ucr get samba/max_open_files is set to the suggested value of 32808
>21.11.18 20:36:19.990  MODULE      ( PROCESS ) : Trying to get 1492
>21.11.18 20:36:20.010  MODULE      ( PROCESS ) : open files: 0 , max open files: 32808
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : Running 53_package_status
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : This can be checked by running: dpkg --audit Login to the system as root via ssh and run the command "dpkg --configure -a" in order to correct the packages status.
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : Running 30_disk_usage
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : Checks if there is enough free disk space available
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : Running 02_certificate_check
>21.11.18 20:36:20.168  MODULE      ( PROCESS ) : This can be checked by running ucr get server/roles and ucr get ldap/master
>21.11.18 20:36:20.494  MODULE      ( PROCESS ) : Running 22_kdc_service
>21.11.18 20:36:20.494  MODULE      ( PROCESS ) : Makes a KDC reachability check
>21.11.18 20:36:20.649  MODULE      ( PROCESS ) : Trying to cantact KDC backup11.ar41i1.qa on port 88
>21.11.18 20:36:20.649  MODULE      ( PROCESS ) : Similar to running: nmapbackup11.ar41i1.qa -p 88
>21.11.18 20:36:20.696  MODULE      ( PROCESS ) : Trying to cantact KDC master10.ar41i1.qa on port 88
>21.11.18 20:36:20.696  MODULE      ( PROCESS ) : Similar to running: nmapmaster10.ar41i1.qa -p 88
>21.11.18 20:36:20.778  MODULE      ( PROCESS ) : Trying to cantact KDC backup11.ar41i1.qa on port 88
>21.11.18 20:36:20.778  MODULE      ( PROCESS ) : Similar to running: nmapbackup11.ar41i1.qa -p 88
>21.11.18 20:36:20.786  MODULE      ( PROCESS ) : Trying to cantact KDC master10.ar41i1.qa on port 88
>21.11.18 20:36:20.786  MODULE      ( PROCESS ) : Similar to running: nmapmaster10.ar41i1.qa -p 88
>21.11.18 20:36:20.852  MODULE      ( PROCESS ) : Running 51_hostname_check
>21.11.18 20:36:20.852  MODULE      ( PROCESS ) : checks non-compliant hostnames. Check https://tools.ietf.org/html/rfc1123#section-2 for the syntax of hostnames
>21.11.18 20:36:20.862  MODULE      ( PROCESS ) : Running 50_check_ucr_templates
>21.11.18 20:36:20.862  MODULE      ( PROCESS ) : This can be checked by running: univention-check-templates
>21.11.18 20:36:20.951  MODULE      ( PROCESS ) : Running 11_nameserver
>21.11.18 20:36:20.951  MODULE      ( PROCESS ) : Checks if all nameservers are responsive
>21.11.18 20:36:20.984  MODULE      ( PROCESS ) : Similar to running: dig +short www.univention.de @192.168.0.3
>21.11.18 20:36:20.984  MODULE      ( PROCESS ) : Trying 192.168.0.3 to resolve www.univention.de
>21.11.18 20:36:21.008  MODULE      ( PROCESS ) : Similar to running: dig +short master10 @10.200.8.10
>21.11.18 20:36:21.008  MODULE      ( PROCESS ) : Trying 10.200.8.10 to resolve master10
>21.11.18 20:36:21.065  MODULE      ( PROCESS ) : Running 56_univention_types
>21.11.18 20:36:21.065  MODULE      ( PROCESS ) : 
>21.11.18 20:36:21.171  MODULE      ( PROCESS ) : Running 45_heimdal_on_samba4_dc
>21.11.18 20:36:21.171  MODULE      ( PROCESS ) : This can be checked by running: samba-tool processes
>21.11.18 20:36:21.376  MODULE      ( PROCESS ) : Running 12_proxy
>21.11.18 20:36:21.376  MODULE      ( PROCESS ) : Checks if the proxy server runs correctly
>21.11.18 20:36:21.380  MODULE      ( PROCESS ) : Running 20_check_nameservers
>21.11.18 20:36:21.380  MODULE      ( PROCESS ) : Checks nameserver entries on DNS zones
>21.11.18 20:36:21.393  MODULE      ( PROCESS ) : Running 52_mail_acl_sync
>21.11.18 20:36:21.393  MODULE      ( PROCESS ) : Checks if all IMAP shared Folder ACLs are in sync with UDM
>21.11.18 20:36:21.480  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe785c4950> in UDM/LDAP
>21.11.18 20:36:21.480  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=master10)(zoneName=ar41i1.qa)))
>21.11.18 20:36:21.487  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe595adbd0> in UDM/LDAP
>21.11.18 20:36:21.487  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=backup11)(zoneName=ar41i1.qa)))
>21.11.18 20:36:21.497  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe785c49d0> in UDM/LDAP
>21.11.18 20:36:21.497  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=master10)(zoneName=ar41i1.qa)))
>21.11.18 20:36:21.531  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe70079250> in UDM/LDAP
>21.11.18 20:36:21.531  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=backup11)(zoneName=ar41i1.qa)))
>21.11.18 20:36:21.538  MODULE      ( PROCESS ) : Running 21_check_join_status
>21.11.18 20:36:21.538  MODULE      ( PROCESS ) : This can be checked by running: univention-check-join-status
>21.11.18 20:36:21.647  MODULE      ( PROCESS ) : Running 04_saml_certificate_check
>21.11.18 20:36:21.647  MODULE      ( PROCESS ) : Checks SAML certificates
>21.11.18 20:36:21.651  MODULE      ( PROCESS ) : compares ucs-sso by using 'ucr get ucs/server/sso/fqdn' with /usr/share/univention-management-console/saml/idp/*.xml
>21.11.18 20:36:21.698  MODULE      ( PROCESS ) : Running 41_samba_tool_showrepl
>21.11.18 20:36:21.698  MODULE      ( PROCESS ) : This can be checked by running: samba-tool drs showrepl
>21.11.18 20:36:22.392  MODULE      ( PROCESS ) : Running 42_samba_tool_sysvolcheck
>21.11.18 20:36:22.392  MODULE      ( PROCESS ) : This can be checked by running samba-tool ntacl sysvolcheck
>21.11.18 20:36:22.562  MODULE      ( PROCESS ) : Checking certificates of /etc/univention/ssl/master10.ar41i1.qa/cert.pem
>21.11.18 20:36:22.785  MODULE      ( PROCESS ) : Running 00_check_server_password
>21.11.18 20:36:22.785  MODULE      ( PROCESS ) : Trying to authenticatate with machine password against LDAP  Similar to running: univention-ldapsearch -LLLs base dn
>21.11.18 20:36:22.990  MODULE      ( PROCESS ) : Running 44_well_known_sid_check
>21.11.18 20:36:22.990  MODULE      ( PROCESS ) : Checks if all well known SIDs exist and if their names are consistent
>21.11.18 20:36:23.310  MODULE      ( PROCESS ) : Running 23_check_update_sites
>21.11.18 20:36:23.310  MODULE      ( PROCESS ) : Checks resolving repository servers
>21.11.18 20:36:23.343  MODULE      ( PROCESS ) : Trying to resolve address of repository server updates.software-univention.de
>21.11.18 20:36:23.343  MODULE      ( PROCESS ) : Similar to running: host updates.software-univention.de
>21.11.18 20:36:23.343  MODULE      ( PROCESS ) : Trying to resolve address of repository server appcenter.software-univention.de
>21.11.18 20:36:23.343  MODULE      ( PROCESS ) : Similar to running: host appcenter.software-univention.de
>21.11.18 20:36:23.392  MODULE      ( PROCESS ) : Running 10_gateway
>21.11.18 20:36:23.392  MODULE      ( PROCESS ) : This can be checked by using ucr get gateway
>21.11.18 20:36:23.498  MODULE      ( PROCESS ) : Running 31_file_permissions
>21.11.18 20:36:23.498  MODULE      ( PROCESS ) : Checks file permissions
>21.11.18 20:36:23.545  MODULE      ( PROCESS ) : Checking permission for /etc/ldap.secret
>21.11.18 20:36:23.545  MODULE      ( PROCESS ) : Similar to running: stat /etc/ldap.secret
>21.11.18 20:36:23.546  MODULE      ( PROCESS ) : Checking permission for /etc/machine.secret
>21.11.18 20:36:23.546  MODULE      ( PROCESS ) : Similar to running: stat /etc/machine.secret
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /etc/pam_ldap.secret
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /etc/pam_ldap.secret
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /etc/idp-ldap-user.secret
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /etc/idp-ldap-user.secret
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /etc/libnss-ldap.conf
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /etc/libnss-ldap.conf
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /var/run/slapd/ldapi
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /var/run/slapd/ldapi
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/openssl.cnf
>21.11.18 20:36:23.547  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/openssl.cnf
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/password
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/password
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/ucsCA
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/ucsCA
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/ucs-sso.ar41i1.qa
>21.11.18 20:36:23.548  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/ucs-sso.ar41i1.qa
>21.11.18 20:36:23.549  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/master10.ar41i1.qa
>21.11.18 20:36:23.549  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/master10.ar41i1.qa
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Checking permission for /var/lib/univention-self-service-passwordreset-umc/memcached.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Similar to running: stat /var/lib/univention-self-service-passwordreset-umc/memcached.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-saml/memcached.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-saml/memcached.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Checking permission for /var/run/uvmm.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Similar to running: stat /var/run/uvmm.socket
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Checking permission for /var/lock/sysvol-sync-dir
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Similar to running: stat /var/lock/sysvol-sync-dir
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-ad-connector
>21.11.18 20:36:23.550  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-ad-connector
>21.11.18 20:36:23.551  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-appcenter
>21.11.18 20:36:23.551  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-appcenter
>21.11.18 20:36:23.552  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-bind-proxy
>21.11.18 20:36:23.552  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-bind-proxy
>21.11.18 20:36:23.555  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-config
>21.11.18 20:36:23.555  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-config
>21.11.18 20:36:23.559  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-directory-listener
>21.11.18 20:36:23.559  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-directory-listener
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-directory-reports
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-directory-reports
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-management-console
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-management-console
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-management-console-module-diagnostic
>21.11.18 20:36:23.560  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-management-console-module-diagnostic
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-printserver
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-printserver
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-samba4
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-samba4
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-quota
>21.11.18 20:36:23.561  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-quota
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-ox
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-ox
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Checking permission for /var/mail
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Similar to running: stat /var/mail
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Checking permission for /var/mail/systemmail
>21.11.18 20:36:23.562  MODULE      ( PROCESS ) : Similar to running: stat /var/mail/systemmail
>21.11.18 20:36:23.563  MODULE      ( PROCESS ) : Checking permission for /var/tmp/univention-management-console-frontend
>21.11.18 20:36:23.563  MODULE      ( PROCESS ) : Similar to running: stat /var/tmp/univention-management-console-frontend
>21.11.18 20:36:23.563  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-management-console/10035-1542828974594.socket
>21.11.18 20:36:23.563  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-management-console/10035-1542828974594.socket
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-management-console/10035-1542828329114.socket
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-management-console/10035-1542828329114.socket
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-system-setup
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-system-setup
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/s4internal.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/s4internal.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/s4cache.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/s4cache.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/lockingdb.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/lockingdb.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/internal.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/internal.sqlite
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Checking permission for /etc/simplesamlphp/ucs-sso.ar41i1.qa-idp-certificate.key
>21.11.18 20:36:23.564  MODULE      ( PROCESS ) : Similar to running: stat /etc/simplesamlphp/ucs-sso.ar41i1.qa-idp-certificate.key
>21.11.18 20:36:23.703  MODULE      ( PROCESS ) : Running 43_connectors4_rejects
>21.11.18 20:36:23.703  MODULE      ( PROCESS ) : Checks if there are S4 Connector rejects
>21.11.18 20:36:24.203  MODULE      ( PROCESS ) : Running 46_kerberos_ddns_update
>21.11.18 20:36:24.203  MODULE      ( PROCESS ) : Checks if kerberos authenticated DNS updates
>21.11.18 20:36:24.284  MODULE      ( PROCESS ) : Running: kinit--password-file=/etc/machine.secretmaster10$
>21.11.18 20:36:24.690  MODULE      ( PROCESS ) : Running: 'echo server {server}
>prereq yxdomain {domain}
>send
>quit
> | nsupdate -g -t 15
>21.11.18 20:36:24.738  MODULE      ( PROCESS ) : Checking S4-Connector rejects Similar to running univention-s4connector-list-rejected
>21.11.18 20:36:25.731  MODULE      ( PROCESS ) : Running: kinit--keytab=/var/lib/samba/private/dns.keytabdns-master10
>21.11.18 20:36:25.812  MODULE      ( PROCESS ) : Running: 'echo server {server}
>prereq yxdomain {domain}
>send
>quit
> | nsupdate -g -t 15
>21.11.18 20:36:40.700  MODULE      ( PROCESS ) : Running 01_ssh_connection
>21.11.18 20:36:40.700  MODULE      ( PROCESS ) : This can be checked by running:  univention-ssh /etc/machine.secret "master10$"@fqdn echo OK
>21.11.18 20:36:40.711  MODULE      ( PROCESS ) : Running 32_security_limits
>21.11.18 20:36:40.711  MODULE      ( PROCESS ) : checks samba logfile /var/log/samba/log.smbd for "too many open files" messages 
> checks if ucr get samba/max_open_files is set to the suggested value of 32808
>21.11.18 20:36:40.712  MODULE      ( PROCESS ) : Running 54_sources_list_check
>21.11.18 20:36:40.712  MODULE      ( PROCESS ) :  Check by opening /etc/apt/sources.list.d/* and look for exceptions
>21.11.18 20:36:40.712  MODULE      ( PROCESS ) : Running 40_samba_tool_dbcheck
>21.11.18 20:36:40.712  MODULE      ( PROCESS ) : This can be checked by running samba-tool dbcheck
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : Running 02_certificate_check
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : This can be checked by running ucr get server/roles and ucr get ldap/master
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : Running 53_package_status
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : This can be checked by running: dpkg --audit Login to the system as root via ssh and run the command "dpkg --configure -a" in order to correct the packages status.
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : Running 03_check_notifier_replication
>21.11.18 20:36:40.713  MODULE      ( PROCESS ) : get id of ucr get ldap/master and check if var/lib/univention-directory-listener/notifier_id) is the same 
>21.11.18 20:36:40.714  MODULE      ( PROCESS ) : Running 55_user_migration
>21.11.18 20:36:40.714  MODULE      ( PROCESS ) : Checks if there are user objects which are not migrated by using /usr/share/univention-directory-manager-tools/univention-migrate-users-to-ucs4.3 --check
>21.11.18 20:36:40.742  MODULE      ( PROCESS ) : Running 30_disk_usage
>21.11.18 20:36:40.742  MODULE      ( PROCESS ) : Checks if there is enough free disk space available
>21.11.18 20:36:40.775  MODULE      ( PROCESS ) : Trying to get 1492
>21.11.18 20:36:40.781  MODULE      ( PROCESS ) : open files: 0 , max open files: 32808
>21.11.18 20:36:40.821  MODULE      ( PROCESS ) : Running 22_kdc_service
>21.11.18 20:36:40.821  MODULE      ( PROCESS ) : Makes a KDC reachability check
>21.11.18 20:36:40.866  MODULE      ( PROCESS ) : Running 51_hostname_check
>21.11.18 20:36:40.866  MODULE      ( PROCESS ) : checks non-compliant hostnames. Check https://tools.ietf.org/html/rfc1123#section-2 for the syntax of hostnames
>21.11.18 20:36:40.920  MODULE      ( PROCESS ) : Running 50_check_ucr_templates
>21.11.18 20:36:40.920  MODULE      ( PROCESS ) : This can be checked by running: univention-check-templates
>21.11.18 20:36:40.968  MODULE      ( PROCESS ) : Running 11_nameserver
>21.11.18 20:36:40.968  MODULE      ( PROCESS ) : Checks if all nameservers are responsive
>21.11.18 20:36:41.005  MODULE      ( PROCESS ) : Trying to cantact KDC backup11.ar41i1.qa on port 88
>21.11.18 20:36:41.005  MODULE      ( PROCESS ) : Similar to running: nmapbackup11.ar41i1.qa -p 88
>21.11.18 20:36:41.041  MODULE      ( PROCESS ) : Trying to cantact KDC master10.ar41i1.qa on port 88
>21.11.18 20:36:41.041  MODULE      ( PROCESS ) : Similar to running: nmapmaster10.ar41i1.qa -p 88
>21.11.18 20:36:41.049  MODULE      ( PROCESS ) : Trying to cantact KDC backup11.ar41i1.qa on port 88
>21.11.18 20:36:41.049  MODULE      ( PROCESS ) : Similar to running: nmapbackup11.ar41i1.qa -p 88
>21.11.18 20:36:41.059  MODULE      ( PROCESS ) : Similar to running: dig +short www.univention.de @192.168.0.3
>21.11.18 20:36:41.059  MODULE      ( PROCESS ) : Trying 192.168.0.3 to resolve www.univention.de
>21.11.18 20:36:41.073  MODULE      ( PROCESS ) : Trying to cantact KDC master10.ar41i1.qa on port 88
>21.11.18 20:36:41.073  MODULE      ( PROCESS ) : Similar to running: nmapmaster10.ar41i1.qa -p 88
>21.11.18 20:36:41.119  MODULE      ( PROCESS ) : Running 56_univention_types
>21.11.18 20:36:41.119  MODULE      ( PROCESS ) : 
>21.11.18 20:36:41.140  MODULE      ( PROCESS ) : Running 45_heimdal_on_samba4_dc
>21.11.18 20:36:41.140  MODULE      ( PROCESS ) : This can be checked by running: samba-tool processes
>21.11.18 20:36:41.200  MODULE      ( PROCESS ) : Running 12_proxy
>21.11.18 20:36:41.200  MODULE      ( PROCESS ) : Checks if the proxy server runs correctly
>21.11.18 20:36:41.353  MODULE      ( PROCESS ) : Running 20_check_nameservers
>21.11.18 20:36:41.353  MODULE      ( PROCESS ) : Checks nameserver entries on DNS zones
>21.11.18 20:36:41.376  MODULE      ( PROCESS ) : Similar to running: dig +short master10 @10.200.8.10
>21.11.18 20:36:41.376  MODULE      ( PROCESS ) : Trying 10.200.8.10 to resolve master10
>21.11.18 20:36:41.423  MODULE      ( PROCESS ) : Running 21_check_join_status
>21.11.18 20:36:41.423  MODULE      ( PROCESS ) : This can be checked by running: univention-check-join-status
>21.11.18 20:36:41.426  MODULE      ( PROCESS ) : Running 52_mail_acl_sync
>21.11.18 20:36:41.427  MODULE      ( PROCESS ) : Checks if all IMAP shared Folder ACLs are in sync with UDM
>21.11.18 20:36:41.535  MODULE      ( PROCESS ) : Running 04_saml_certificate_check
>21.11.18 20:36:41.538  MODULE      ( PROCESS ) : Checks SAML certificates
>21.11.18 20:36:41.559  MODULE      ( PROCESS ) : compares ucs-sso by using 'ucr get ucs/server/sso/fqdn' with /usr/share/univention-management-console/saml/idp/*.xml
>21.11.18 20:36:41.834  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe45c97790> in UDM/LDAP
>21.11.18 20:36:41.834  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=master10)(zoneName=ar41i1.qa)))
>21.11.18 20:36:41.848  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe45c97290> in UDM/LDAP
>21.11.18 20:36:41.848  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=backup11)(zoneName=ar41i1.qa)))
>21.11.18 20:36:41.893  MODULE      ( PROCESS ) : Running 41_samba_tool_showrepl
>21.11.18 20:36:41.893  MODULE      ( PROCESS ) : This can be checked by running: samba-tool drs showrepl
>21.11.18 20:36:41.896  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe45c975d0> in UDM/LDAP
>21.11.18 20:36:41.896  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=master10)(zoneName=ar41i1.qa)))
>21.11.18 20:36:41.931  MODULE      ( PROCESS ) : Trying to find nameserver <univention.management.console.modules.diagnostic.plugins.20_check_nameservers.NameServer object at 0x7fbe45ccc7d0> in UDM/LDAP
>21.11.18 20:36:41.931  MODULE      ( PROCESS ) : Similar to running: univention-ldapsearch (|(&(relativeDomainName=backup11)(zoneName=ar41i1.qa)))
>21.11.18 20:36:42.249  MODULE      ( PROCESS ) : Running 42_samba_tool_sysvolcheck
>21.11.18 20:36:42.249  MODULE      ( PROCESS ) : This can be checked by running samba-tool ntacl sysvolcheck
>21.11.18 20:36:42.356  MODULE      ( PROCESS ) : Running 00_check_server_password
>21.11.18 20:36:42.356  MODULE      ( PROCESS ) : Trying to authenticatate with machine password against LDAP  Similar to running: univention-ldapsearch -LLLs base dn
>21.11.18 20:36:42.482  MODULE      ( PROCESS ) : Running 44_well_known_sid_check
>21.11.18 20:36:42.482  MODULE      ( PROCESS ) : Checks if all well known SIDs exist and if their names are consistent
>21.11.18 20:36:42.487  MODULE      ( PROCESS ) : Checking certificates of /etc/univention/ssl/master10.ar41i1.qa/cert.pem
>21.11.18 20:36:42.671  MODULE      ( PROCESS ) : Running 23_check_update_sites
>21.11.18 20:36:42.671  MODULE      ( PROCESS ) : Checks resolving repository servers
>21.11.18 20:36:42.677  MODULE      ( PROCESS ) : Running 10_gateway
>21.11.18 20:36:42.677  MODULE      ( PROCESS ) : This can be checked by using ucr get gateway
>21.11.18 20:36:42.744  MODULE      ( PROCESS ) : Trying to resolve address of repository server updates.software-univention.de
>21.11.18 20:36:42.744  MODULE      ( PROCESS ) : Similar to running: host updates.software-univention.de
>21.11.18 20:36:42.745  MODULE      ( PROCESS ) : Trying to resolve address of repository server appcenter.software-univention.de
>21.11.18 20:36:42.745  MODULE      ( PROCESS ) : Similar to running: host appcenter.software-univention.de
>21.11.18 20:36:42.778  MODULE      ( PROCESS ) : Running 31_file_permissions
>21.11.18 20:36:42.778  MODULE      ( PROCESS ) : Checks file permissions
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /etc/ldap.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /etc/ldap.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /etc/machine.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /etc/machine.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /etc/pam_ldap.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /etc/pam_ldap.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /etc/idp-ldap-user.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /etc/idp-ldap-user.secret
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /etc/libnss-ldap.conf
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /etc/libnss-ldap.conf
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Checking permission for /var/run/slapd/ldapi
>21.11.18 20:36:42.816  MODULE      ( PROCESS ) : Similar to running: stat /var/run/slapd/ldapi
>21.11.18 20:36:42.817  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl
>21.11.18 20:36:42.817  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/openssl.cnf
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/openssl.cnf
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/password
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/password
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/ucsCA
>21.11.18 20:36:42.819  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/ucsCA
>21.11.18 20:36:42.823  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/ucs-sso.ar41i1.qa
>21.11.18 20:36:42.823  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/ucs-sso.ar41i1.qa
>21.11.18 20:36:42.823  MODULE      ( PROCESS ) : Checking permission for /etc/univention/ssl/master10.ar41i1.qa
>21.11.18 20:36:42.823  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/ssl/master10.ar41i1.qa
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/lib/univention-self-service-passwordreset-umc/memcached.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/lib/univention-self-service-passwordreset-umc/memcached.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-saml/memcached.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-saml/memcached.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/run/uvmm.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/run/uvmm.socket
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/lock/sysvol-sync-dir
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/lock/sysvol-sync-dir
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-ad-connector
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-ad-connector
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-appcenter
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-appcenter
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-bind-proxy
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-bind-proxy
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-config
>21.11.18 20:36:42.832  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-config
>21.11.18 20:36:42.833  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-directory-listener
>21.11.18 20:36:42.833  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-directory-listener
>21.11.18 20:36:42.834  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-directory-reports
>21.11.18 20:36:42.834  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-directory-reports
>21.11.18 20:36:42.834  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-management-console
>21.11.18 20:36:42.835  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-management-console
>21.11.18 20:36:42.835  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-management-console-module-diagnostic
>21.11.18 20:36:42.835  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-management-console-module-diagnostic
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-printserver
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-printserver
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-samba4
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-samba4
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-quota
>21.11.18 20:36:42.839  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-quota
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-ox
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-ox
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/mail
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/mail
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/mail/systemmail
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/mail/systemmail
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/tmp/univention-management-console-frontend
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/tmp/univention-management-console-frontend
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-management-console/10035-1542828974594.socket
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-management-console/10035-1542828974594.socket
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Checking permission for /var/run/univention-management-console/10035-1542828329114.socket
>21.11.18 20:36:42.841  MODULE      ( PROCESS ) : Similar to running: stat /var/run/univention-management-console/10035-1542828329114.socket
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Checking permission for /var/cache/univention-system-setup
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Similar to running: stat /var/cache/univention-system-setup
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/s4internal.sqlite
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/s4internal.sqlite
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/s4cache.sqlite
>21.11.18 20:36:42.842  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/s4cache.sqlite
>21.11.18 20:36:42.844  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/lockingdb.sqlite
>21.11.18 20:36:42.844  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/lockingdb.sqlite
>21.11.18 20:36:42.844  MODULE      ( PROCESS ) : Checking permission for /etc/univention/connector/internal.sqlite
>21.11.18 20:36:42.844  MODULE      ( PROCESS ) : Similar to running: stat /etc/univention/connector/internal.sqlite
>21.11.18 20:36:42.849  MODULE      ( PROCESS ) : Checking permission for /etc/simplesamlphp/ucs-sso.ar41i1.qa-idp-certificate.key
>21.11.18 20:36:42.849  MODULE      ( PROCESS ) : Similar to running: stat /etc/simplesamlphp/ucs-sso.ar41i1.qa-idp-certificate.key
>21.11.18 20:36:42.881  MODULE      ( PROCESS ) : Running 43_connectors4_rejects
>21.11.18 20:36:42.881  MODULE      ( PROCESS ) : Checks if there are S4 Connector rejects
>21.11.18 20:36:43.000  MODULE      ( PROCESS ) : Running 46_kerberos_ddns_update
>21.11.18 20:36:43.000  MODULE      ( PROCESS ) : Checks if kerberos authenticated DNS updates
>21.11.18 20:36:43.107  MODULE      ( PROCESS ) : Running: kinit--password-file=/etc/machine.secretmaster10$
>21.11.18 20:36:43.167  MODULE      ( PROCESS ) : Checking S4-Connector rejects Similar to running univention-s4connector-list-rejected
>21.11.18 20:36:43.459  MODULE      ( PROCESS ) : Running: 'echo server {server}
>prereq yxdomain {domain}
>send
>quit
> | nsupdate -g -t 15
>21.11.18 20:36:43.614  MODULE      ( PROCESS ) : Running: kinit--keytab=/var/lib/samba/private/dns.keytabdns-master10
>21.11.18 20:36:43.679  MODULE      ( PROCESS ) : Running: 'echo server {server}
>prereq yxdomain {domain}
>send
>quit
> | nsupdate -g -t 15
>21.11.18 20:37:41.619  MODULE      ( PROCESS ) : Running 42_samba_tool_sysvolcheck
>21.11.18 20:37:41.619  MODULE      ( PROCESS ) : This can be checked by running samba-tool ntacl sysvolcheck
>21.11.18 20:44:20.413  MODULE      ( PROCESS ) : Running 42_samba_tool_sysvolcheck
>21.11.18 20:44:20.413  MODULE      ( PROCESS ) : This can be checked by running samba-tool ntacl sysvolcheck
>21.11.18 20:44:23.130  MODULE      ( PROCESS ) : Output of samba-tool ntacl sysvolreset:
>
>STDOUT:
>set_nt_acl_conn: open: error=2 (No such file or directory)
>Unable to set ACL O:DAG:DAD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) on /var/lib/samba/sysvol/ar41i1.qa/Policies/{6AC1786C-016F-11D2-945F-00C04FB984F9}
>set_nt_acl_conn: open: error=2 (No such file or directory)
>Unable to set ACL O:DAG:DAD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) on /var/lib/samba/sysvol/ar41i1.qa/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}
>
>21.11.18 20:54:21.136  MAIN        ( WARN    ) : Shutting down all open connections

Actions: View

Attachments on bug 47649: 9750 | 9751