Bug 34096 - App-Center aborts join in firewalled network environment
App-Center aborts join in firewalled network environment
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC - App-Center
UCS 3.2
amd64 Linux
: P5 normal (vote)
: UCS 3.2-1
Assigned To: Dirk Wiesenthal
Stefan Gohmann
:
Depends on:
Blocks: 34128
  Show dependency treegraph
 
Reported: 2014-02-10 15:29 CET by Philipp Hahn
Modified: 2014-02-18 06:35 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2014-02-10 15:29:11 CET
In a firewalled environment, where the hosts are not allowed to directly access the internet (only through a HTTP proxy, which must be enabled manually), univention-join fails because the the App-center is unreachable:

# tail /var/log/univention/join.log
Configure 35univention-management-console-module-appcenter.inst Mon Feb 10 14:53:54 CET 2014
Object exists: cn=UMC,cn=univention,XXX
Object exists: cn=UMC,cn=policies,XXX
Object exists: cn=operations,cn=UMC,cn=univention,XXX
Object exists: cn=default-umc-all,cn=UMC,cn=policies,XXX
WARNING: cannot append cn=default-umc-all,cn=UMC,cn=policies,XXX to univentionPolicyReference, value exists
No modification: cn=Domain Admins,cn=groups,XXX
Object exists: cn=default-umc-users,cn=UMC,cn=policies,XXX
WARNING: cannot append cn=default-umc-users,cn=UMC,cn=policies,XXX to univentionPolicyReference, value exists
No modification: cn=Domain Users,cn=groups,XXX
Object exists: cn=appcenter-all,cn=operations,cn=UMC,cn=univention,XXX
WARNING: cannot append cn=appcenter-all,cn=operations,cn=UMC,cn=univention,XXX to allow, value exists
No modification: cn=default-umc-all,cn=UMC,cn=policies,XXX
Object exists: cn=apps,cn=univention,XXX
Object exists: cn=ldapschema,cn=univention,XXX
INFO: No change of core data of object univention-app.
Object exists: cn=ldapacl,cn=univention,XXX
INFO: No change of core data of object 66univention-appcenter_app.
Object exists: cn=udm_module,cn=univention,XXX
INFO: No change of core data of object appcenter/app.
No modification: cn=univention-app,cn=ldapschema,cn=univention,XXX

No modification: cn=66univention-appcenter_app,cn=ldapacl,cn=univention,XXX

No modification: cn=appcenter/app,cn=udm_module,cn=univention,XXX

Waiting for activation of the extension object univention-app: OK
Waiting for activation of the extension object 66univention-appcenter_app: OK
Waiting for activation of the extension object appcenter/app: OK
Waiting for file /usr/share/pyshared/univention/admin/handlers/appcenter/app.py: OK
Terminating running univention-cli-server processes.
Traceback (most recent call last):
  File "<string>", line 15, in <module>
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/appcenter/app_center.py", line 601, in all_installed
    for app in cls.all(force_reread=force_reread, only_local=only_local, localize=localize):
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/appcenter/app_center.py", line 612, in all
    cls._get_category_translations(fake=not localize)
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/appcenter/app_center.py", line 489, in _get_category_translations
    fp = urlopen(url)
  File "/usr/lib/pymodules/python2.6/univention/management/console/modules/appcenter/util.py", line 96, in urlopen
    return urllib2.urlopen(request)
  File "/usr/lib/python2.6/urllib2.py", line 126, in urlopen
    return _opener.open(url, data, timeout)
  File "/usr/lib/python2.6/urllib2.py", line 391, in open
    response = self._open(req, data)
  File "/usr/lib/python2.6/urllib2.py", line 409, in _open
    '_open', req)
  File "/usr/lib/python2.6/urllib2.py", line 369, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.6/urllib2.py", line 1192, in https_open
    return self.do_open(httplib.HTTPSConnection, req)
  File "/usr/lib/python2.6/urllib2.py", line 1159, in do_open
    raise URLError(err)
urllib2.URLError: <urlopen error [Errno -2] Name or service not known>
Mon Feb 10 14:53:57 CET 2014: finish /usr/sbin/univention-join
Comment 1 Stefan Gohmann univentionstaff 2014-02-14 06:54:49 CET
This is also a problem during the installation of UCS without a network connection. So it is a blocker for the 3.2-1 release.

Please increase the 3rd number from the package version: a.b.c-d → c+1. Thus we can backport this fix to UCS 3.2-0-errata without a problem.
Comment 2 Dirk Wiesenthal univentionstaff 2014-02-14 12:08:17 CET
Fixed in 3.2-1
  univention-management-console-module-appcenter 3.0.51-1.235.201402141151

/usr/sbin/univention-register-apps has been added and it is called in the join script. If univention-register-apps fails only a warning is shown:
  sys.stderr.write('univention-register-apps did not succeed. Check the internet connection and try again.\n')

Also fixed a problem with re-registering apps that were EndOfLife
Comment 3 Stefan Gohmann univentionstaff 2014-02-16 11:29:34 CET
Tests: OK
Installation without network: OK
Changelog: I've copied the YAML entry to the changelog
Comment 4 Stefan Gohmann univentionstaff 2014-02-18 06:35:05 CET
UCS 3.2-1 has been released:
 http://docs.univention.de/release-notes-3.2-1-en.html
 http://docs.univention.de/release-notes-3.2-1-de.html

If this error occurs again, please use "Clone This Bug".