Bug 54453 – Update Checkscript do not interrupt update to UCS 5 though ldap scheme errors exists

Bug 54453 - Update Checkscript do not interrupt update to UCS 5 though ldap scheme errors exists


Summary:	Update Checkscript do not interrupt update to UCS 5 though ldap scheme errors...

Status:	REOPENED

Product:	UCS
Classification:	Unclassified
Component:	Update - univention-updater
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:	UCS maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2022-02-14 15:41 CET by Dirk Schnick
Modified:	2022-03-11 20:33 CET (History)
CC List:	3 users (show)

See Also:	53455
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.171
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2022021321000187
Bug group (optional):	bitesize
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dirk Schnick

2022-02-14 15:41:37 CET

A customer updated UCS (@school env). The check script presented:

Checking ldap_schema ...                          6206992c UNKNOWN attributeDescription "UNIVENTIONCREATEREVOKECERTIFICATE" inserted.
6206992c UNKNOWN attributeDescription "UNIVENTIONRENEWCERTIFICATE" inserted.
# (65) Object class violation: unrecognized objectClass 'univentionManageCertificates'
dn: uid=user1,cn=users,dc=blubb,dc=loc

# (65) Object class violation: unrecognized objectClass 'univentionManageCertificates'
dn: uid=user2,cn=users,dc=blubb,dc=loc

OK

So customer proceed with the update and have now problems with joining servers.
The check script must stop the update if ldap scheme errors are detected (from my point of view)
The Object seems to be part of Cool Solution univention-usercert