Bug 41443 - Squid Join-Script may fail when S4 Replication takes longer than expected
Squid Join-Script may fail when S4 Replication takes longer than expected
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Squid
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.1-2-errata
Assigned To: Felix Botner
Stefan Gohmann
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-06-03 12:36 CEST by Nico Stöckigt
Modified: 2016-09-29 21:42 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.171
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2016051821000246
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nico Stöckigt univentionstaff 2016-06-03 12:36:33 CEST
Script '98univention-squid-samba4.inst' only waits up to 5 mins for replication of the squid user. In environments with many objects the replication might take quite longer so the script will fail. This issue especially points to UCS@School environments. See also Ticket #2016051821000246

A good solution might be to wait longer (probably configurable via ucr). Also the check might only be performed every 10 secs.
Comment 1 Felix Botner univentionstaff 2016-06-06 11:49:47 CEST
univention-squid-kerberos/98univention-squid-samba4.inst
 * sleep 10 seconds in search loop
 * timeout is configurable via squid/kerberos/join/timeout (default 300)

univention-squid-kerberos.yaml
Comment 2 Stefan Gohmann univentionstaff 2016-06-07 20:26:52 CEST
Code review: Failed

It is a little bit confusing. You've added a new UCR variable  squid/kerberos/join/timeout and the value * 10 is the timeout in seconds. 
If a new UCR variable is added, it should be documented and it should use a standard unit for example seconds. Otherwise increase simply the timeout from 5 to 20 minutes.
Comment 3 Felix Botner univentionstaff 2016-06-08 09:21:37 CEST
added ucr description
fixed timeout unit

univention-squid-kerberos: 5.0.1-3.23.201606080913
Comment 4 Stefan Gohmann univentionstaff 2016-06-08 09:45:31 CEST
OK, that looks better. Tests and YAML file are OK.
Comment 5 Janek Walkenhorst univentionstaff 2016-06-08 14:28:36 CEST
<http://errata.software-univention.de/ucs/4.1/192.html>