Bug 38789 – UDM not usable on DC backup if master is down

Bug 38789 - UDM not usable on DC backup if master is down


Summary:	UDM not usable on DC backup if master is down

Status:	REOPENED

Product:	UCS
Classification:	Unclassified
Component:	UMC - Domain management (Generic)
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.0-x
Assigned To:	UMC maintainers
QA Contact:

URL:
Keywords:

Duplicates:	11077 31797 33848 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2015-06-29 17:27 CEST by Florian Best
Modified:	2019-07-19 10:27 CEST (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	5: Blocking further progress on the daily work
User Pain:	0.114
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Error handling, External feedback
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Florian Best

2015-06-29 17:27:54 CEST

If the DC master is not reachable (=offline) one cannot use UDM (CLI + UMC).
Both udm-cli and the UDM UMC-module are raising/showing a traceback:
...
SERVER_DOWN: {'desc': "Can't contact LDAP server"}

Comment 1 Florian Best

2015-06-29 17:33:32 CEST

Quoting the original feedback:
"""
Situation: 
- UCS 4.0 Domain Master un UCS 4.0 Domain Backup
- Domain Master ist abgeschaltet 
- Domain Backup produziert diesen fehler, sobald man auf eine UDM Konsole mit LDAP Link geht (User, Gruppen)
- Verhalten auf 2 komplett verschiedenen Umgebungen getestet! Kein einzelner Bug (allenfalls eine systematische Fehlkonfiguration, aber …) 

Sprich, der Domain Backup Server ist wertlos, da er ohne Domain Master nicht funktioniert 

LDAP:
- Das LDAP ist vollständig un korrekt synchonisiert!
- ldapsearch auf Backup funktioniert tadellos - auch bei abgeschaltenem Master
- "univention-directory-manager users/user list”  funktioniert nicht! (ist wohl der identische Fehler wie unter, welcher via GUI produziert wurde)

Versionen:
- 4.0-2 errata 205 und errata 213 getestet; selbes Verhalten
"""

Comment 2 Florian Best

2015-07-08 15:02:47 CEST

*** Bug 31797 has been marked as a duplicate of this bug. ***

Comment 3 Florian Best

2015-07-14 10:26:52 CEST

*** Bug 11077 has been marked as a duplicate of this bug. ***

Comment 4 Florian Best

2015-11-20 17:34:40 CET

*** Bug 33848 has been marked as a duplicate of this bug. ***

Comment 5 Stefan Gohmann

2019-01-03 07:18:29 CET

This issue has been filled against UCS 4.0. The maintenance with bug and security fixes for UCS 4.0 has ended on 31st of May 2016.

Customers still on UCS 4.0 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.

Comment 6 Ingo Steuwer

2019-07-19 10:25:22 CEST

To modify something in LDAP UDM needs write access, which is only available on DC Master.

What is the objective here? A better error message, or read only functionality?

Comment 7 Florian Best

2019-07-19 10:27:16 CEST

(In reply to Ingo Steuwer from comment #6)
> To modify something in LDAP UDM needs write access, which is only available
> on DC Master.
> 
> What is the objective here? A better error message, or read only
> functionality?

I think read only functionality should be provided.