Bug 38488 - Update from 3.2-5 >= errata 276 to 4.0-1 fails on systems with s4-connector
Update from 3.2-5 >= errata 276 to 4.0-1 fails on systems with s4-connector
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 4.0
Other Linux
: P5 critical (vote)
: UCS 3.2-5-errata
Assigned To: Arvid Requate
Stefan Gohmann
Depends on:
Blocks: 38566
  Show dependency treegraph
Reported: 2015-05-07 16:54 CEST by Janis Meybohm
Modified: 2015-05-21 15:56 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted after Product Owner Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Janis Meybohm univentionstaff 2015-05-07 16:54:04 CEST

3.2 erratum 276 introduces extended LDAP schema for GPO Security Descriptors.
As the UCS 4.0 release version of the univention-s4-connector package does not provide these extended schema the update of slapd might (or will always) fail.

For UCS 4 the schema is provided with erratum 42.
Comment 1 Arvid Requate univentionstaff 2015-05-19 17:49:41 CEST
univention-ldap-config.postinst now implements a "local" diversion for the msgpo.schema file, so it doesn't get overwritten during package updates.
The diversion is to /usr/share/univention-ldap/schema/msgpo.schema.ucs-errata.

This diversion will get removed again in errata4.0-2 via Bug #38566.

Advisory: 2015-05-19-univention-ldap.yaml
Comment 2 Stefan Gohmann univentionstaff 2015-05-20 07:55:22 CEST

Tests: OK

I was able to reproduce it:

Loading the database from the LDIF dump failed with the following
error while running slapadd:
    555b4da6 OVER: Loading Translog Overlay
    555b4da6 OVER: db_init
    555b4da6 OVER: Configuring Translog Overlay
    555b4da6 OVER: Configured Translog Overlay to use file "/var/lib/univention-ldap/listener/listener"
    555b4da6 <= str2entry: str2ad(MSNTSECURITYDESCRIPTOR): attribute type undefined
    slapadd: could not parse entry (line=6487)
    555b4da6 OVER: db_close
    555b4da6 OVER: db_destroy
dpkg: Fehler beim Bearbeiten von slapd (--configure):

After installing this erratum, I wasn't able to reproduce it again.
Comment 3 Janek Walkenhorst univentionstaff 2015-05-21 15:56:34 CEST