Univention Bugzilla – Attachment 10735 Details for
Bug 53281
Update copy of production environment
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
test-protocol.log
test-protocol.log (text/x-log), 21.31 KB, created by
Arvid Requate
on 2021-05-21 00:17 CEST
(
hide
)
Description:
test-protocol.log
Filename:
MIME Type:
Creator:
Arvid Requate
Created:
2021-05-21 00:17 CEST
Size:
21.31 KB
patch
obsolete
>### 1) Update of DC Primary > >root@dc-primary:~# curl -OOs https://updates.software-univention.de/download/univention-update-checks/pre-update-checks-5.0-0{,.gpg} >root@dc-primary:~# gpgv --keyring /usr/share/keyrings/univention-archive-key-ucs-5x.gpg pre-update-checks-5.0-0.gpg pre-update-checks-5.0-0 && bash pre-update-checks-5.0-0 >gpgv: Signatur vom Mi 19 Mai 2021 19:10:19 CEST >gpgv: mittels RSA-Schlüssel D293E501A055F562 >gpgv: Korrekte Signatur von "Univention Corporate Server 5.x <packages@univention.de>" > >Starting pre-update-checks-5.0-0 (Do 20. Mai 11:44:48 CEST 2021): >Checking adc_mapping ... OK >Checking adc_multiinstance_mapping ... OK >Checking architecture ... OK >Checking blocking_apps ... FAIL >Checking default_master_packages ... OK >Checking disk_space ... OK >Checking failed_ldif ... OK >Checking for_postgresql94 ... OK >Checking hold_packages ... OK >Checking kolab_schema ... FAIL >Checking ldap_connection ... OK >Checking ldap_schema ... OK >Checking legacy_objects ... FAIL >Checking master_version ... OK >Checking md5_signature_is_used ... OK >Checking min_version ... OK >Checking minimum_ucs_version_of_all_systems_in_domain ... FAIL >Checking old_packages ... OK >Checking overwritten_umc_templates ... OK >Checking package_status ... OK >Checking role_package_removed ... OK >Checking samba_server_schannel ... OK >Checking samba_tdb_size ... OK >Checking slapd_on_member ... OK >Checking system_date_too_old ... OK >Checking system_role ... OK >Checking tls_public_key_size ... OK >Checking tls_public_key_size_ucs-sso ... OK >Checking usr_mountpoint ... OK >Checking valid_machine_credentials ... OK > >The system can not be updated to UCS 5.0 due to the following reasons: > >blocking_apps: >The update to 5.0 is currently not possible, >because the following Apps are not available for UCS 5.0: > * UCS Dashboard > * UCS Dashboard Client > * UCS Dashboard Database > * OpenID Connect Provider > >legacy_objects: > The following objects are no longer supported with UCS-5: > dn: cn=UCC-Update,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=dualview-x200,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=keine_Updates,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=extern,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=Only Update_ucc,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=default-settings,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=futro-s500_fullhd,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=ucc_Notebook_update,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: cn=UCC-Dualscreen-right,cn=ucc,cn=policies,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-2.1-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-3.0-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-3.0-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-rev2-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-rev3-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-rev2-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-1.0-rev3-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-3.0-internal-desktop-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-3.0-internal-notebook-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-nolxde-790-1.0-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientImageName=ucc-nolxde-790-1.0-rev2-thinclient-image.img,cn=Images,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=UCC,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=LXDE,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=Firefox,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=Citrix XenApp,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=UCC Terminal Server,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > dn: univentionCorporateClientSessionName=Windows Terminal Server,cn=Session,cn=UCC,cn=univention,dc=knut,dc=univention,dc=de > They must be removed before the update can be done. > > The following objects contain auxiliary data no longer supported with UCS-5: > dn: cn=tived,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=dragan,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=tral,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=stuva,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=skarv,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=duken,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=lisel,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=kladd,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=landet,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=fabler,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=bastig,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=glansvide,cn=UCC-Desktops,cn=computers,dc=knut,dc=univention,dc=de > dn: cn=futro-s500,cn=UCC-Thinclients,cn=computers,dc=knut,dc=univention,dc=de > They must be cleaned up before the update can be done. > > See <https://help.univention.com/t/16227> for details. > > This check can be disabled by setting the UCR variable 'update50/ignore_legacy_objects' to 'yes'. > >kolab_schema: > The package univention-legacy-kolab-schema is installed. This package is > incompatible with UCS 5.0-0. > > As the package contains a LDAP schema extension, this extension (a) has to > registered in the LDAP database or (b) has to be removed before the update > to UCS 5.0 is possible. > > Note: These steps are only required on the Primary Node. On non-primary systems, > the package can be removed without step (a) or (b). > > (a) Register LDAP schema files from univention-legacy-kolab-schema: > To register the LDAP schema, run the following commands: > cat /usr/share/univention-ldap/schema/legacy/rfc2739.schema > /opt/kolab-legacy.schema > cat /usr/share/univention-ldap/schema/legacy/kolab2.schema >> /opt/kolab-legacy.schema > cat /usr/share/univention-ldap/schema/legacy/univention-kolab2.schema >> /opt/kolab-legacy.schema > cat /usr/share/univention-ldap/schema/legacy/kolab-legacy.schema >> /opt/kolab-legacy.schema > bash -c 'source /usr/share/univention-lib/ldap.sh && ucs_registerLDAPExtension --packagename "univention-legacy-kolab-schema" --packageversion "3.0.0-1.22.201309110849" --schema /opt/kolab-legacy.schema' > > or (b) Remove the LDAP schema extension: > Please visit https://help.univention.com/t/6443 for how to remove LDAP schema extensions > (remove all attributes and objectclasses from that schema from the LDAP database). > > After either (a) or (b) has been completed, the package has to be removed from this server: > univention-remove --purge univention-legacy-kolab-schema > >minimum_ucs_version_of_all_systems_in_domain: >The following hosts must be upgraded to UCS 4.4-8 first: > cn=tyda,cn=dc,cn=computers,dc=knut,dc=univention,dc=de: 4.4-7 > cn=hedra,cn=dc,cn=computers,dc=knut,dc=univention,dc=de: 4.4-7 > cn=solig,cn=dc,cn=computers,dc=knut,dc=univention,dc=de: 4.2-5 > cn=tjog,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-6 > cn=jibra,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-5 > cn=tross,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-7 > cn=ranarp,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-7 > cn=frihult,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-6 > cn=laneberg,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.4-5 > cn=in8-jenkins-slave01,cn=MemberServer,cn=computers,dc=knut,dc=univention,dc=de: 4.2-1 >The following extensions are incompatible with UCS 5.0: > cn=50_ox,cn=udm_syntax,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxAccess,cn=udm_hook,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=66oxforucs,cn=ldapacl,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxGroupHook,cn=udm_hook,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxContextRW,cn=udm_hook,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxUserDefaults,cn=udm_hook,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxmail,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxlists,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxdomain,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxfolder,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxcontext,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=univention-openvpn,cn=udm_hook,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=63openvpn-sitetosite,cn=ldapacl,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=policies/mailquota,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [3.2-0..unspecified) > cn=oxmail/oxfetchmailmulti,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxresources/oxresources,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oxmail/oxfetchmailsingle,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=univention-openvpn-schema,cn=udm_syntax,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=58openid-connect-provider.ldapacl,cn=ldapacl,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > cn=oidc/rpservice,cn=udm_module,cn=univention,dc=knut,dc=univention,dc=de: [unspecified..unspecified) > > >============================= >root@dc-primary:~# univention-app info >UCS: 4.4-8 errata974 >Installed: admindiary-frontend=1.0 dhcp-server=12.0 prometheus=1.1-1 prometheus-node-exporter=1.1 samba4=4.10 self-service=4.0 self-service-backend=4.0 > >============================= > >* Steps performed: > >root@dc-primary:~# ucr set listener/debug/level=2 >root@dc-primary:~# /etc/init.d/univention-directory-listener restart >root@dc-primary:~# univention-app remove openid-connect-provider >root@dc-primary:~# univention-app remove 4.3/admin-dashboard >root@dc-primary:~# univention-app remove prometheus >root@dc-primary:~# univention-app remove prometheus-node-exporter >root@dc-primary:~# cat /usr/share/univention-ldap/schema/legacy/rfc2739.schema > /opt/kolab-legacy.schema >root@dc-primary:~# cat /usr/share/univention-ldap/schema/legacy/kolab2.schema >> /opt/kolab-legacy.schema >root@dc-primary:~# cat /usr/share/univention-ldap/schema/legacy/univention-kolab2.schema >> /opt/kolab-legacy.schema >root@dc-primary:~# cat /usr/share/univention-ldap/schema/legacy/kolab-legacy.schema >> /opt/kolab-legacy.schema >root@dc-primary:~# bash -c 'source /usr/share/univention-lib/ldap.sh && ucs_registerLDAPExtension \ > --packagename "univention-legacy-kolab-schema" --packageversion "3.0.0-1.22.201309110849" --schema /opt/kolab-legacy.schema' > >root@dc-primary:~# ucr set ldap/database/mdb/envflags=nosync >root@dc-primary:~# systemctl restart slapd >root@dc-primary:~# univention-remove --purge univention-legacy-kolab-schema > >root@dc-primary:~# for s in 50_ox univention-openvpn-schema; do bash -c "source /usr/share/univention-lib/ldap.sh && ucs_unregisterLDAPExtension --udm_syntax $s"; done >root@dc-primary:~# for h in oxAccess oxGroupHook oxContextRW oxUserDefaults univention-openvpn; do bash -c "source /usr/share/univention-lib/ldap.sh && ucs_unregisterLDAPExtension --udm_hook $h"; done >root@dc-primary:~# for m in oxmail/oxmail oxmail/oxlists oxmail/oxdomain oxmail/oxfolder oxmail/oxcontext policies/mailquota oxmail/oxfetchmailmulti oxresources/oxresources oxmail/oxfetchmailsingle; do bash -c "source /usr/share/univention-lib/ldap.sh && ucs_unregisterLDAPExtension --udm_module $m"; done >root@dc-primary:~# for l in 66oxforucs 63openvpn-sitetosite; do bash -c "source /usr/share/univention-lib/ldap.sh && ucs_unregisterLDAPExtension --acl $l"; done > >* Also remove all blocking LDAP-Objects > >* Adjust UCR policy for repostory/online/server at cn=domain-policy,cn=policies,dc=knut,dc=univention,dc=de >* Adjust UCR policy for apache2/force_https=no at cn=domain-policy,cn=policies,dc=knut,dc=univention,dc=de > (otherwise portal cannot be accessed after update, known issue according to Dirk) >* /etc/init.d/univention-directory-policy restart > > >## The update: > >* Tracebacks in updater.log: > >=========================================== >Multifile: /etc/ldap/slapd.conf > File "<stdin>", line 11 > print 'include /usr/share/univention-ldap/schema/oxforucs-extra.schema' > ^ >SyntaxError: Missing parentheses in call to 'print'. Did you mean print('include /usr/share/univention-ldap/schema/oxforucs-extra.schema')? > File "<stdin>", line 18 > ''' % { 'access' : access } > ^ >SyntaxError: invalid syntax >=========================================== > >root@dc-primary:~# dpkg -l univention-ox* >Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten >| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/ > Halb installiert/Trigger erWartet/Trigger anhängig >|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schlecht) >||/ Name Version Architektur Beschreibung >+++-===================================-===========================-============-========================================================= >ii univention-ox-common 9.0.7-3A~4.2.0.201711212150 all UCS Open-Xchange Common (Transitional dummy package) >ii univention-ox-dependencies-master 9.0.7-3A~4.2.0.201711212150 all UCS package for Open-Xchange dependencies on DC Master >ii univention-ox-directory-integration 9.0.7-3A~4.2.0.201711212150 all UCS Open-Xchange Integration (Transitional dummy package) >ii univention-ox-framework 9.0.7-3A~4.2.0.201711212150 all UCS Open-Xchange Framework (Transitional dummy package) > >root@dc-primary:~# less /etc/univention/templates/files/etc/ldap/slapd.conf.d/29univention-open-xchange_schema >@!@ >import os.path >if (configRegistry.get('ldap/server/type') == "master") and configRegistry.is_false('ox/master/42/registered_ldap_acls', True): > if not os.path.isfile("/usr/share/univention-ldap/schema/legacy/kolab2.schema"): > print 'include /usr/share/univention-ldap/schema/oxforucs-extra.schema' > print 'include /usr/share/univention-ldap/schema/oxforucs.schema' >@!@ > >* Felix: "da wurde das template als /var/lib/univention-ldap/local-schema/oxforucs.schema schon einmal im LDAP registriert, deswegen hat hier jetzt alles geklappt, falls ox/master/42/registered_ldap_acls nicht gesetzt wurde (also das ox template nicht registriert wurde) bekommt man aber vermutlich ein Problem, hier in diesem Fall ist es jetzt nur diese unschöne Meldung beim commit von slapd.conf" > >root@dc-primary:~# grep unrestrictedMailSize /var/lib/univention-ldap/local-schema/* >/var/lib/univention-ldap/local-schema/kolab-legacy.schema: NAME 'unrestrictedMailSize' > > >## Before the second update attempt I did this: > > >root@dc-primary:~# apt-get purge univention-ox-directory-integration >Paketlisten werden gelesen... Fertig >Abhängigkeitsbaum wird aufgebaut. >Statusinformationen werden eingelesen.... Fertig >Die folgenden Pakete wurden automatisch installiert und werden nicht mehr benötigt: > univention-ox-common univention-ox-framework >Verwenden Sie »apt autoremove«, um sie zu entfernen. >Die folgenden Pakete werden ENTFERNT: > univention-ox-dependencies-master* univention-ox-directory-integration* > > >## But there are still tracebacks: > > >* Error due to: univention-corporate-client-schema: /etc/univention/templates/files/etc/ldap/slapd.conf.d/65ucc > updater.log shows: >=========================================== >Failed to process Subfile /etc/univention/templates/files/etc/python2.6/sitecustomize.py.d/10apport.py >Failed to process Subfile /etc/univention/templates/files/etc/python2.6/sitecustomize.py.d/20utf8.py >File: /etc/init.d/slapd >Multifile: /etc/ldap/slapd.conf > File "<stdin>", line 18 > ''' % { 'access' : access } > ^ >SyntaxError: invalid syntax > File "<stdin>", line 18 > ''' % { 'access' : access } > ^ >SyntaxError: invalid syntax > File "<stdin>", line 18 > ''' % { 'access' : access } > ^ >SyntaxErr >=========================================== > > >Starting univention-upgrade. Current UCS version is 5.0-0 errata0 > >Checking for local repository: none >Checking for package updates: none >Checking for app updates: none >Checking for release updates: none >Setting update/available > >real 75m19,476s >user 12m18,112s >sys 5m35,016s > > >## After the update some joinscripts are not installed: > >root@nissedal:~# dpkg -C >root@nissedal:~# univention-check-join-status >Warning: 'univention-portal' is not configured. >Warning: 'univention-self-service' is not configured. >Warning: 'univention-server-overview' is not configured. >Error: Not all install files configured: 3 missing > > >* BUG? After update the screen session cannot be resumed: > > root@dc-primary:~# screen -x > Cannot find terminfo entry for 'xterm-256color'. > > >### 2) Update of DC Backup > >* Unclear which App to uninstall: > >=========================================== >blocking_apps: >The update to 5.0 is currently not possible, >because the following Apps are not available for UCS 5.0: > * pascom > * OpenID Connect Provider > >root@antilop:~# univention-app info >UCS: 4.4-8 errata979 >Installed: mobydick=1.0.0 openid-connect-provider=2.2-konnect-0.33.11 samba4=4.10 self-service-backend=4.0 >=========================================== > >* dc-backup: >root@dc-backup:~# ucr set listener/debug/level=2 >root@dc-backup:~# /etc/init.d/univention-directory-listener restart >root@dc-backup:~# ucr set ldap/database/mdb/envflags=nosync >root@dc-backup:~# systemctl restart slapd > >* After solving temporary problem https://forge.univention.org/bugzilla/show_bug.cgi?id=53298 >root@dc-backup:~# univention-app remove openid-connect-provider >root@dc-backup:~# univention-app remove mobydick > > >## The update: > >Starting univention-upgrade. Current UCS version is 5.0-0 errata0 > >Checking for local repository: none >Checking for package updates: none >Checking for app updates: none >Checking for release updates: none >Setting update/available >root@dc-backup:~# dpkg -X >dpkg-deb: Fehler: --vextract benötigt einen .deb-Dateinamen und ein Verzeichnis als Argumente > >Geben Sie dpkg-deb --help für Hilfe zum Verändern von *.deb-Dateien ein; >geben Sie dpkg --help für Hilfe zum (De-)Installieren von Paketen ein. >root@dc-backup:~# dpkg -C >root@dc-backup:~# univention-check-join-status >Warning: 'univention-join' is not configured. >Warning: 'univention-portal' is not configured. >Warning: 'univention-server-overview' is not configured. >Error: Not all install files configured: 3 missing >root@dc-backup:~# univention-run-join-scripts >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
Actions:
View
Attachments on
bug 53281
: 10735