Bug 45455 - stunnel4 fails at start (but erroneously)
stunnel4 fails at start (but erroneously)
Status: RESOLVED WORKSFORME
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-09-26 11:59 CEST by Mathieu Simon
Modified: 2018-10-23 10:47 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.091
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): External feedback, SAML, Troubleshooting
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mathieu Simon 2017-09-26 11:59:52 CEST
Hi

We've had the following issues during an update which was the same as reported here https://help.univention.com/t/ucs-4-2-0-stunnel-startet-nicht/5530

How to reproduce: 
* Upgrade a system with univention-saml installed from 4.1-4 latest errata to 4.2-0 or later (as of testing it was 4.2-2 errata 184)
* univention-saml runs as process and depends on the stunnel4 package, stunnel4 also ships its own init script that is actually not used but fails.
* Reboot the system and see stunnel4 service errrors

The issue is that at boot stunnel exits with signal 1 and thus systemd shows a failed service when in fact the required sockets are started through the univention-saml init script already.

The current workaround in order to have a clean boot of such a system, was to 'systemctl disable stunnel4'.

This allows a system administration to have less garbage error messages during reboots and doesn't need to spend to time to analyze an actual non-issue in terms a working univention-saml service.

Second I wanted to let you know that stunnel4 is still shipped from the 4.1 repository whether or not that is a major issues it shows that the package was not rebuild/updated for 4.2 specifically.

-- Mathieu Simon
Comment 1 Jürn Brodersen univentionstaff 2018-10-23 10:46:53 CEST
This seems to be fixed in ucs 4.3.

Thank you for your report.