Bug 46605 – Block Upgrade to 4.3: breaks UMC with single-server SSO configured

Bug 46605 - Block Upgrade to 4.3: breaks UMC with single-server SSO configured


Summary:	Block Upgrade to 4.3: breaks UMC with single-server SSO configured

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	SAML
Version:	UCS 4.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.3
Assigned To:	Erik Damrose
QA Contact:	Jürn Brodersen

URL:
Keywords:	interim-4

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2018-03-12 14:31 CET by Erik Damrose
Modified:	2018-03-14 14:38 CET (History)
CC List:	4 users (show)

See Also:	46563
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	5: Blocking further progress on the daily work
User Pain:	0.143
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Erik Damrose

2018-03-12 14:31:14 CET

Due to Bug #46563 the update to 4.3 will be blocked on such systems.

Comment 1 Erik Damrose

2018-03-12 16:36:17 CET

3e2caf36 Block if single-server SSO is configured
univention-updater 13.0.1-35A~4.3.0.201803121556

9deeac2b changelog

Comment 2 Erik Damrose

2018-03-12 17:38:28 CET

6e557f31 fix script univention-updater 13.0.1-36A~4.3.0.201803121737

Comment 3 Jürn Brodersen

2018-03-12 18:24:48 CET

Ok works
-> Verified

Comment 4 Stefan Gohmann

2018-03-12 21:50:57 CET

The Jenkins AD Connector tests failed:

[master231] 2018-03-12T21:10:03.038202	WARNING: Single-Sign on was reconfigured and is not using the default
[master231] 2018-03-12T21:10:03.038202	         DNS settings. When continued, there will be issues using UMC
[master231] 2018-03-12T21:10:03.038202	         after the update.
[master231] 2018-03-12T21:10:03.038202	         
[master231] 2018-03-12T21:10:03.038202	         This check can be disabled by setting the UCR variable
[master231] 2018-03-12T21:10:03.038202	         update43/ignore_sso_domain to yes.
[master231] 2018-03-12T21:10:03.099090	Error: Please check "/var/log/univention/updater.log" for details.
[master231] 2018-03-12T21:10:03.108440	ERROR: update failed. Please check /var/log/univention/updater.log
[master231] 2018-03-12T21:10:03.196695	ERROR: univention-upgrade failed exitcode 1

The system was not joined so I added a check if ucs/server/sso/fqdn is set.

[4.3-0 a2f8c1c22c] * Don't block the upgrade if ucs/server/sso/fqdn is not set   (Bug #46605)

Comment 5 Jürn Brodersen

2018-03-13 12:51:25 CET

What I tested:
Updated is blocked with ucs/server/sso/fqdn changed -> OK
Updated is not blocked with ucs/server/sso/fqdn unchanged -> OK
Updated is not blocked with ucs/server/sso/fqdn unset -> OK

-> Verified

Comment 6 Stefan Gohmann

2018-03-14 14:38:33 CET

UCS 4.3 has been released:
 https://docs.software-univention.de/release-notes-4.3-0-en.html
 https://docs.software-univention.de/release-notes-4.3-0-de.html

If this error occurs again, please use "Clone This Bug".