Bug 42865 - Session timeout during system setup after successful installation
Session timeout during system setup after successful installation
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: System setup
UCS 4.1
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
: 42870 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-11-07 20:01 CET by Michael Grandjean
Modified: 2019-01-03 07:19 CET (History)
4 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.343
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2016103121000756
Bug group (optional): Usability
Max CVSS v3 score:


Attachments
Screenshot of locked system setup session (47.68 KB, image/png)
2016-11-07 20:03 CET, Michael Grandjean
Details
dpkg.log (1.01 MB, text/x-log)
2016-11-08 19:27 CET, Michael Grandjean
Details
setup.log (208.06 KB, text/x-log)
2016-11-08 19:28 CET, Michael Grandjean
Details
management-console-module-setup.log (594 bytes, text/x-log)
2016-11-08 20:18 CET, Michael Grandjean
Details
Script to reproduce the installation problem (5.23 KB, text/plain)
2016-12-20 19:19 CET, Alexander Kläser
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2016-11-07 20:01:02 CET
version/erratalevel: 324
version/patchlevel: 3
version/version: 4.1

During a technical training, 4 out of 8 newly installed UCS Master VMs hit a UMC timeout during system setup. 

We left for lunch while the system setup was still busy installing the previously selected software components (Samba/AD, DHCP Server). After we came back (about 1 hour later), half of the VMs were locked (see attached screenshot). Unfortunately we don't know the password of the user __systemsetup__

Rebooting the systems via an ACPI event seems to be a valid workaround, we did not experience any drawbacks so far.
Comment 1 Michael Grandjean univentionstaff 2016-11-07 20:03:25 CET
Created attachment 8201 [details]
Screenshot of locked system setup session
Comment 2 Erik Damrose univentionstaff 2016-11-08 09:19:14 CET
Which installation media was used to install UCS?
Comment 3 Stefan Gohmann univentionstaff 2016-11-08 09:20:57 CET
*** Bug 42870 has been marked as a duplicate of this bug. ***
Comment 4 Stefan Gohmann univentionstaff 2016-11-08 09:22:41 CET
Also reported via feedback, from Bug #42870:

(In reply to Stefan Gohmann from comment #0)
> Feedback Ticket #2016103121000756:
> 
> FEEDBACK: Perhaps left it too long configuring.
> 
> When i came back, the background said configuration successful, but ontop of
> that was an error message box which I could not read because ontop of that
> was the UCS login screen
> with the user set to "_systemsetup_" of which the password i set earlier did
> not work.
> 
> i tried a few other user names, like admin, root etc. i now realise the user
> is administrator and perhaps that would have worked. instead i had to reboot
> it. all seems fine now...
Comment 5 Erik Damrose univentionstaff 2016-11-08 11:47:03 CET
I could not reproduce the issue with the most recent 4.1-3 DVD and the 4.1-4 ucs appliance.

Setup.log and dpkg.log of affected systems might help to analyse this further. I suspect that system-setup-boot was updated during the setup process, and our previous errata updates to uss-boot do not catch all possible cases that might produce such an error.
Comment 6 Florian Best univentionstaff 2016-11-08 12:01:56 CET
What probably more helps is where did you get the installation media from? Which initial system setup version has this been. (Did you select "update system after installation"? Because then your "version/erratalevel: 324" is not the installation version).

@Erik
I had this issue, too, with our internal UCS 4.1-3 USB stick on a hardware system. But this was due to http://errata.software-univention.de/ucs/4.1/244.html.
Comment 7 Michael Grandjean univentionstaff 2016-11-08 19:27:37 CET
Created attachment 8204 [details]
dpkg.log

(In reply to Florian Best from comment #6)
> What probably more helps is where did you get the installation media from?

I used:
> mgrandje@utby:~$ ls -la /mnt/omar/vmwares/kvm/iso/ucs/UCS_4.1-3-amd64.iso
> -rw-rw-r--+ 1 edamrose Domain Users 1279492096 Aug 17 16:48 /mnt/omar/vmwares/kvm/iso/ucs/UCS_4.1-3-amd64.iso
> mgrandje@utby:~$ md5sum /mnt/omar/vmwares/kvm/iso/ucs/UCS_4.1-3-amd64.iso
> 513d2fab9d77ab49243baa1fdbbe13db  /mnt/omar/vmwares/kvm/iso/ucs/UCS_4.1-3-amd64.iso

> Which initial system setup version has this been. (Did you select "update
> system after installation"? Because then your "version/erratalevel: 324" is
> not the installation version).

Yes, I did select "update system after installation".

> root@ucs-6361:~# rgrep "install univention-system-setup" /var/log/dpkg.log
> 2016-11-07 11:33:39 install univention-system-setup:all <none> 9.0.4-35.979.201608091120
> 2016-11-07 11:33:39 install univention-system-setup-boot:all <none> 9.0.4-35.979.201608091120

I attached dpkg.log and setup.log
If further infos are needed, VM runs on utby (mgrandje_ucs41-64-121, 10.200.30.121), feel free.

I also experienced Bug #42550, but did not notice this yesterday - not sure if this is related.
Comment 8 Michael Grandjean univentionstaff 2016-11-08 19:28:13 CET
Created attachment 8205 [details]
setup.log
Comment 9 Florian Best univentionstaff 2016-11-08 20:13:41 CET
Please also attach management-console-module-setup.log
Comment 10 Michael Grandjean univentionstaff 2016-11-08 20:18:54 CET
Created attachment 8206 [details]
management-console-module-setup.log
Comment 11 Florian Best univentionstaff 2016-11-08 20:23:51 CET
So, system-setup-boot is starting with 9.0.4-35 (which was never released).
This is a version between http://errata.software-univention.de/ucs/4.1/234.html (9.0.4-33) and http://errata.software-univention.de/ucs/4.1/238.html (9.0.4-36).
During the installation it upgrades system-setup-boot to 9.0.4-48.
which is http://errata.software-univention.de/ucs/4.1/278.html (including errata 292, 244).
Comment 12 Erik Damrose univentionstaff 2016-11-09 13:56:41 CET
The file you used seems to be a test DVD i copied to our internal VM environment. I forgot to update the iso with the final version, for which i am sorry.

The tested and officially released ISO can be found at

http://updates.software-univention.de/download/ucs-cds/ucs4.1-3/
or
omar:/var/univention/buildsystem2/mirror/ftp/download/ucs-cds/ucs4.1-3/

Another test with UCS_4.1-3-amd64.iso (MD5: b72705313ac55325f21e81645d45b662) did not reproduce your problem.

-> WORKSFORME

Before resolving this bug i will try to contact the user of the feedback ticket at which a similar error occured.
Comment 13 Alexander Kläser univentionstaff 2016-12-20 19:19:19 CET
Created attachment 8316 [details]
Script to reproduce the installation problem

(In reply to Erik Damrose from comment #12)
> The file you used seems to be a test DVD i copied to our internal VM
> environment. I forgot to update the iso with the final version, for which i
> am sorry.
> 
> The tested and officially released ISO can be found at
> 
> http://updates.software-univention.de/download/ucs-cds/ucs4.1-3/
> or
> omar:/var/univention/buildsystem2/mirror/ftp/download/ucs-cds/ucs4.1-3/
> 
> Another test with UCS_4.1-3-amd64.iso (MD5:
> b72705313ac55325f21e81645d45b662) did not reproduce your problem.
> 
> -> WORKSFORME
> 
> Before resolving this bug i will try to contact the user of the feedback
> ticket at which a similar error occured.

I could reproduce the problem with /mnt/omar/vmwares/kvm/iso/ucs/UCS_4.1-3-amd64.iso. I have attached a VNC script that will reproduce the bug with a standard installation with German language settings. I also have a VM snapshot with opened JS-console. It seems that various requests were not answered after some point in the update process. A final call to setup/finished is then answered with 401. Presumably the apache service has switched off, its package has been updated too long such that the session is gone. Nevertheless, UMC should be able to recover as the password is given as query string.

We could try to update first apache in the preup script and then run the rest of the updates.
Comment 14 Alexander Kläser univentionstaff 2016-12-20 19:20:25 CET
I think I can recognize the problem in the piwik statistics quite often.
Comment 15 Alexander Kläser univentionstaff 2017-01-04 15:18:12 CET
Could this be a duplicated of Bug 42211?
Comment 16 Stefan Gohmann univentionstaff 2017-04-20 09:35:37 CEST
Does it still happen with UCS 4.2? If yes, we should fix it otherwise we should wait and see if it happens again with 4.1-4 or 4.2.
Comment 17 Alexander Kläser univentionstaff 2017-07-21 11:08:38 CEST
(In reply to Stefan Gohmann from comment #16)
> Does it still happen with UCS 4.2? If yes, we should fix it otherwise we
> should wait and see if it happens again with 4.1-4 or 4.2.

I could not find a proper hypothesis in order to explain this behaviour. I would expect this issue not to happen with UCS 4.2. There are various things that have been improved (UMC session handling, activation process, setup wizard). So let us wait.
Comment 18 Stefan Gohmann univentionstaff 2019-01-03 07:19:04 CET
This issue has been filled against UCS 4.1. The maintenance with bug and security fixes for UCS 4.1 has ended on 5st of April 2018.

Customers still on UCS 4.1 are encouraged to update to UCS 4.3. Please contact
your partner or Univention for any questions.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or simply reopen the issue. In this case please provide detailed information on how this issue is affecting you.