Bug 50458 - join failed due to ssh timeout
join failed due to ssh timeout
Status: NEW
Product: UCS
Classification: Unclassified
Component: Join (univention-join)
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2019-11-06 14:52 CET by Christian Völker
Modified: 2021-01-26 15:32 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 2: Improvement: Would be a product improvement
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 4: A User would return the product
User Pain: 0.091
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019110321000588, 2020071421000331, 2020040821000606, 2020081221000118, 2020102721000783
Bug group (optional): Error handling, External feedback
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Völker univentionstaff 2019-11-06 14:52:56 CET
A customer cannot join additional UCS servers.

Output is:
Check DC Master:

**************************************************************************
* Join failed!                                                           *
* Contact your system administrator                                      *
**************************************************************************
* Message:  Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- The ssh-login to administrator@ucs.domain.com failed with " ". Please make sure the account administrator exists and is a member of the Domain Admins group!
**************************************************************************

The call for univention-ssh uses a timeout of 3 seconds (-timeout 3) which is ways to low for very busy or slow master servers.

* Increase the timeout to 10seconds
or
* Make it configurable by an UCRV
or
* Write a proper error message instead of nothing (ie timeout occured)

Best, implement all three...
Comment 1 Christian Castens univentionstaff 2020-08-21 10:24:25 CEST
reported again:
Version: 4.4-4 errata499 (Blumenthal)

Remark: ssh für ****** geht von allen anderen UCS Hosts aus. Auch wurde der Account schon für dutzende Installationen ohne Probleme benutzt. UCS-Version auf dem Master: 4.4-4
errata 652

Role: domaincontroller_slave



Error:
Domäneneinrichtung (Dies kann einige Zeit dauern): Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- The ssh-login to
******@master.******.******* failed with " ". Please make sure the account ****** exists and is a member of the Domain Admins group!
Mon Jul 13 14:48:30 CEST 2020: starting /usr/sbin/univention-join -dcname master.******.****** -dcaccount ****** -dcpwd /var/cache/univention-system-setup/secret -checkPrerequisites
running version check
OK: UCS version on master.******.****** is higher or equal (4.44) to the local version (4.44).
Check if /var/lib/univention-directory-replication/failed.ldif exists
Mon Jul 13 14:48:38 CEST 2020: finish /usr/sbin/univention-join
Tue Jul 14 10:55:24 CEST 2020: starting /usr/sbin/univention-join -dcname master.******.****** -dcaccount ****** -dcpwd /var/cache/univention-system-setup/secret -checkPrerequisites


**************************************************************************
* Join failed!                                                           *
* Contact your system administrator                                      *
**************************************************************************
* Message:  Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- The ssh-login to ******@master.******.****** failed with "
". Please make sure the account ****** exists and is a member of the Domain Admins group!
**************************************************************************
Tue Jul 14 10:55:30 CEST 2020: finish /usr/sbin/univention-join
Tue Jul 14 10:56:05 CEST 2020: starting /usr/sbin/univention-join -dcname master.******.****** -dcaccount ****** -dcpwd /var/cache/univention-system-setup/secret -checkPrerequisites
running version check
OK: UCS version on master.*******.******* is higher or equal (4.44) to the local version (4.44).
Check if /var/lib/univention-directory-replication/failed.ldif exists
Tue Jul 14 10:56:21 CEST 2020: finish /usr/sbin/univention-join
Tue Jul 14 11:00:34 CEST 2020: starting /usr/share/univention-join/univention-join -dcname master.******.****** -dcaccount ****** -dcpwd /tmp/tmp.dR9fo0bJbH


**************************************************************************
* Join failed!                                                           *
* Contact your system administrator                                      *
**************************************************************************
* Message:  Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- The ssh-login to ******@master.******.****** failed with "
". Please make sure the account ****** exists and is a member of the Domain Admins group!
**************************************************************************


Role: domaincontroller_slave
Comment 2 Christian Castens univentionstaff 2020-08-21 11:55:38 CEST
reported again:
Version: 4.4-4 errata521 (Blumenthal)
Role: domaincontroller_slave
Comment 3 Christian Castens univentionstaff 2020-08-24 10:07:14 CEST
reported again:
Version: 4.4-3 errata587 (Blumenthal)
Role: domaincontroller_backup