Bug 44035 - AD Member Mode: State clearly when to select "Join into an existing Active Directory domain"
AD Member Mode: State clearly when to select "Join into an existing Active Di...
Product: UCS
Classification: Unclassified
Component: System setup
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.2-0-errata
Assigned To: Florian Best
Felix Botner
Depends on:
  Show dependency treegraph
Reported: 2017-03-22 22:21 CET by Michael Grandjean
Modified: 2017-06-19 15:04 CEST (History)
4 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.309
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2016092921000325, 2016092221002292, 2017030621000056
Bug group (optional): External feedback, Usability
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2017-03-22 22:21:51 CET
As of UCS 4.1-4, we have for options during "Domain setup" when installing UCS:

* Create a new UCS domain
* Join an existing Active Directory domain
* Join an existing UCS domain
* Do not use any domain

For some reason, people keep choosing "Join an existing Active Directory domain" when they should choose "Join an existing UCS domain". I believe that's because:

1. UCS provides Active Directory Domain Services via Samba, so people think "Well, it's Active Directory, so that must be it"
2. It's the second radio button and comes before the correct choice, which is only third. People often choose the first matching option without reading all the way down.

I propose two changes:
1. We should put Windows or Microsoft in there. The option could be renamed to "Join an existing Microsoft Active Directory domain". The little help text could become "This system will become a member of an existing non-UCS Active Directory". That would also cover other Samba ADs that are not UCS.
2. Switch the order. Make "Join an existing UCS domain" the second radio button and "Join an existing Active Directory domain" the third one.
Comment 1 Stefan Gohmann univentionstaff 2017-04-21 11:10:23 CEST
*** Bug 36413 has been marked as a duplicate of this bug. ***
Comment 2 Arvid Requate univentionstaff 2017-05-29 11:54:26 CEST
I agree, the options are not self explanatory here. It's a crucial cross roads point in the installer and it should be a no-brainer to select the correct option.

Can't we simply say "Join an existing domain" and let the installer code figure out what kind of domain the user is about to join to?

If that's not possible then I also agree to implement both proposals above.
Comment 3 Florian Best univentionstaff 2017-05-29 12:06:45 CEST
(In reply to Arvid Requate from comment #2)
> Can't we simply say "Join an existing domain" and let the installer code
> figure out what kind of domain the user is about to join to?
How should we find this out? By testing DNS records?
Comment 4 Arvid Requate univentionstaff 2017-05-29 12:12:35 CEST
Sure, if the user supplies a DNS name, a valid DNS server needs to be configured, and if we have that, then we look up _domaincontroller_master anyway. If the user specifies an IP, we can CLDAP to it.

The thing is: you and I as humans can immediately recognize the domain we are in. We don't require KI here to implement that know how into code, do we?
Comment 5 Florian Best univentionstaff 2017-05-29 17:31:39 CEST
So far, I improved the wording as suggested in the bug description.
I think this is enough for now as changing the internal logic seems more complicated. If we see that there are still usability problems after the text changes we can try to automatically choose the correct type in another errata update.

univention-system-setup (10.0.10-19):
r79937 | Bug #44035: enhance the choice of domain type to join into

r79941 | YAML Bug #44035 Bug #44394 Bug #43273
Comment 6 Felix Botner univentionstaff 2017-06-12 16:40:06 CEST
OK - new texts, approved by Michael
Comment 7 Janek Walkenhorst univentionstaff 2017-06-19 15:04:50 CEST