Bug 33114 – No LDAP SRV records in S4 domains with subdomains created - stalls join for 10m

Bug 33114 - No LDAP SRV records in S4 domains with subdomains created - stalls join for 10m


Summary:	No LDAP SRV records in S4 domains with subdomains created - stalls join for 10m

Status:	RESOLVED WONTFIX

Product:	UCS
Classification:	Unclassified
Component:	DNS
Version:	UCS 4.2
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:

URL:
Keywords:

Depends on:	40078
Blocks:
	Show dependency tree / graph

Reported:	2013-11-05 09:17 CET by Stefan Gohmann
Modified:	2020-07-03 20:53 CEST (History)
CC List:	0 users

See Also:	43217
What kind of report is it?:	Bug Report
What type of bug is this?:	6: Setup Problem: Issue for the setup process
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.137
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Gohmann

2013-11-05 09:17:26 CET

I've installed a Master with Samba 4 and a Slave without Samba 4. The Master uses deadlock29.local as dns domain, the slave uses subdom.deadlock29.local.

During the Slave installation the LDAP SRV records are not created because the slave don't register these records in a S4 domain. That is OK but the 90univention-bind-post.inst waits for the LDAP SRV record creation in the subdomain.

Comment 1 Philipp Hahn

2017-04-19 11:21:15 CEST

1. Sub-domains are currently broken in USS: Bug #40078

management/univention-ldap/10univention-ldap-server.inst contains this:
 82 »···»···/usr/share/univention-admin-tools/univention-dnsedit "$@" --ignore-exists \
 83 »···»···»···"$domainname" add srv ldap tcp 0 100 7389 "$hostname.$domainname." || die
...
 87 »···»···/usr/share/univention-directory-manager-tools/univention-dnsedit "$@" --ignore-exists \
 88 »···»···»···"$domainname" remove srv ldap tcp 0 100 7389 "$hostname.$domainname." || die

2. Two different paths for the same tool should be harmonized:
# ls -gGd /usr/share/univention-admin-tools /usr/share/univention-directory-manager-tools
 /usr/share/univention-admin-tools -> univention-directory-manager-tools
 /usr/share/univention-directory-manager-tools

3. univention-join -dcname master42.$domainname -dcaccount Administrator -dcpwd <(echo univention)
 hangs in 90univention-bind-post.inst for 10m as described in the original BUG report; after that the missing SRV records are ignored.

4. univention-fix-ucr-dns also fails, as it is unable to find "subdomain.$domain" on the master(!) and this re-configures the Master as a forwarder, as no SRV-RR "_domaincontroller_master._tcp.subdomain.$domain" exists! (original Bug #43217)

5. Later 92univention-management-console-web-server.inst fails as the UDP metadata cannot be downloaded:
  Could not download IDP metadata for https://ucs-sso.subdomain.$domain/simplesamlphp/saml2/idp/metadata.php

Comment 2 Ingo Steuwer

2020-07-03 20:53:58 CEST

This issue has been filed against UCS 4.2.

UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.