Bug 48673 – Update to 4.3 Errata 428 breaks Schema extension

Bug 48673 - Update to 4.3 Errata 428 breaks Schema extension


Summary:	Update to 4.3 Errata 428 breaks Schema extension

Status:	CLOSED INVALID

Product:	UCS
Classification:	Unclassified
Component:	Notifier (univention-directory-notifier)
Version:	UCS 4.3
Hardware:	Other Linux

Importance:	P5 major (vote)
Target Milestone:	UCS 4.3-3-errata
Assigned To:	UCS maintainers
QA Contact:	UCS maintainers

URL:	https://help.univention.com/t/durch-p...
Keywords:

Depends on:	48427
Blocks:
	Show dependency tree / graph

Reported:	2019-02-13 23:38 CET by Arvid Requate
Modified:	2021-03-19 12:20 CET (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	1: Nuisance – not a big deal but noticeable
User Pain:	0.011
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:	5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2019-02-13 23:38:14 CET

Report in forum, see URL field above:

Stopping slapd (via systemctl): slapd.service.
2019-02-13 22:31:10.683697302+01:00 (in joinscript_init)
Module: kopano-cfg
Multifile: /etc/ldap/slapd.conf
CRITICAL:main:Error in OpenLDAP configuration:
5c648cae /etc/ldap/slapd.conf: line 206: rootdn is always granted unlimited privileges.
5c648cae WARNING: No dynamic config support for overlay translog.
5c648cae WARNING: No dynamic config support for overlay shadowbind.
5c648cae mdb_db_open: database “cn=translog” cannot be opened: No such file or directory (2). Restore from backup!
5c648cae backend_startup_one (type=mdb, suffix=“cn=translog”): bi_db_open failed! (2)
slap_startup failed (test would succeed using the -u switch)

Comment 1 Sönke Schwardt-Krummrich

2019-02-14 09:07:45 CET

According to the forum, the broken LDAP also existed before the erratum has been installed.

Comment 2 Arvid Requate

2019-02-14 11:41:00 CET

Ok this error message is not nice and we should find a way to avoid it, because it's a red herring leading people into the wrong direction. In the given case the cause of the problem (cannot log into Kopano, deinstallation of packages) was a completely diffferent one:

https://help.univention.com/t/durch-paketupdate-ldap-kaputt/11218/7

Comment 3 Arvid Requate

2019-02-14 13:06:21 CET

As discussed, not a bug in UCS.