Bug 51256 - univention-self-service-passwordreset-umc.service fails with systemd-memcached-wrapper error
univention-self-service-passwordreset-umc.service fails with systemd-memcache...
Status: NEEDMOREINFO
Product: UCS
Classification: Unclassified
Component: Self Service
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2020-05-10 09:57 CEST by Valentin Heidelberger
Modified: 2020-05-12 14:35 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.257
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Valentin Heidelberger univentionstaff 2020-05-10 09:57:13 CEST
After installing the self service frontend univention-self-service-passwordreset-umc.service can't start due to the following error reported in the journal:

Mai 09 22:23:41 slave systemd[1]: Started memcached daemon (univention-self-service instance).
Mai 09 22:23:41 slave systemd-memcached-wrapper[30462]: can't find the user self-service-umc to switch to
Mai 09 22:23:41 slave systemd[1]: univention-self-service-passwordreset-umc.service: Main process exited, code=exited, status=67/n/a
Mai 09 22:23:41 slave systemd[1]: univention-self-service-passwordreset-umc.service: Unit entered failed state.
Mai 09 22:23:41 slave systemd[1]: univention-self-service-passwordreset-umc.service: Failed with result 'exit-code'.

On the backend the service is able to start.
Comment 1 Erik Damrose univentionstaff 2020-05-11 11:52:20 CEST
Needmoreinfo
* Is the frontend app installed on a different server that the backend app?
* What is the impact that the service cannot be started?
Comment 2 Valentin Heidelberger univentionstaff 2020-05-11 14:08:11 CEST
(In reply to Erik Damrose from comment #1)
> Needmoreinfo
> * Is the frontend app installed on a different server that the backend app?

Yes, backend on DC Master, frontend on a DC Slave

> * What is the impact that the service cannot be started?

At least some UCR vars don't seem to work/take effect. For example I activated the self registration via and still it never showed up in the self service. There surely are some other effects but we had to fix it manually with the customer before I could test everything.
Comment 3 Erik Damrose univentionstaff 2020-05-11 14:21:51 CEST
Please be specific in a bug report with that high user pain. We need as much information as possible to reproduce the issue.
* What did the setup look like (we know a DC Master and DC Slave are used), erratalevel etc.
* Which configuration steps were taken after the app installation
* What did you/the customer want so accomplish, what did not work
Comment 4 Ralf Haferkamp 2020-05-12 14:35:35 CEST
(In reply to Erik Damrose from comment #3)
> Please be specific in a bug report with that high user pain. We need as much
> information as possible to reproduce the issue.
> * What did the setup look like (we know a DC Master and DC Slave are used),
> erratalevel etc.

Actually there is a DC Master, 2 DC Backup and a couple of Slaves. (4.4-4 errata579).

> * Which configuration steps were taken after the app installation

I don't remember the exact details, but the error message from comment#0 is what we got on all slaves. Apparently something tried start the "univention-self-service-passwordreset-umc.service" there while the users "self-service-umc" does not exist. Looking at the univention-self-service-passwordreset-umc.postinst that seems to be correct. The user is only created on the master and backup server roles.
Though we're unsure why that service is installed at all on the slave and what tried to enable/start it.

> * What did you/the customer want so accomplish, what did not work