Bug 55662 - 30univention-monitoring-client - State pending
30univention-monitoring-client - State pending
Status: NEW
Product: UCS
Classification: Unclassified
Component: System setup
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-02-06 11:53 CET by it
Modified: 2023-03-16 10:41 CET (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.137
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
listener.log (91.29 KB, text/x-log)
2023-02-06 12:22 CET, it
Details
join.log (80.83 KB, text/x-log)
2023-02-06 12:23 CET, it
Details
join.log - after retry (88.71 KB, text/x-log)
2023-02-06 12:39 CET, it
Details
listener.log - after retry (96.52 KB, text/x-log)
2023-02-06 12:40 CET, it
Details

Note You need to log in before you can comment on or make changes to this bug.
Description it 2023-02-06 11:53:49 CET
After a fresh install of univention 5.0 and upgrade to the latest version 5.0-2 errata572 the domain join status of the script is pending. Retry the joins lead to timeout and do not change the status.

System diag reports:
"univention-check-join-status" returned a problem with the domain join.

STDOUT:
Warning: 'univention-monitoring-client' is not configured.
Error: Not all install files configured: 1 missing

See Manual: Analysis of listener/notifier problems or run the join-scripts via "Domain join" module.
Comment 1 Florian Best univentionstaff 2023-02-06 12:08:39 CET
Please attach the contents of /var/log/univention/join.log and /var/log/univention/listener.log (anonymized or flagged as "univentionstaff").
Comment 2 it 2023-02-06 12:22:50 CET
Created attachment 11028 [details]
listener.log
Comment 3 it 2023-02-06 12:23:06 CET
Created attachment 11029 [details]
join.log
Comment 4 it 2023-02-06 12:27:09 CET
just in case you are stumbling around i made a mistake during the anonymization. In listener log i replaced our domain with: "demo." mind the dot :)
Comment 5 it 2023-02-06 12:39:37 CET
Created attachment 11030 [details]
join.log - after retry
Comment 6 it 2023-02-06 12:40:55 CET
Created attachment 11031 [details]
listener.log - after retry
Comment 7 Florian Best univentionstaff 2023-02-06 12:59:20 CET
The listener.log doesn't reveal the real error.
Nevertheless, please try:
udm settings/ldapschema modify --dn cn=univention-monitoring,cn=ldapschema,cn=univention,dc=demo,dc=intranet --set packageversion=0
and then call the joinscript again.
Does the same error happen? I don't think so. But there could be similar follow-up errors with other objects.
Comment 8 it 2023-02-06 13:07:13 CET
Script replies with:

"E: Invalid syntax: packageversion: Version must not be lower than the current one."

I've looked at the dn and the actual version is: 1.0.0-8A~5.0.0.202211081645
Comment 10 Erik Damrose univentionstaff 2023-02-08 17:22:28 CET
Also happening in my UCS 5.0-2 testenv, after updating to latest errata (5.0-2 e572).
The joinscript ran successfully when i updated to 5.0-3
Comment 11 Florian Best univentionstaff 2023-02-08 17:59:28 CET
I don't see unusual behavior in the listener.log.
Could be that the listener module couldn't be loaded at all due to import errors like Bug #55590 (introduced during some erratum).
Comment 12 Philipp Hahn univentionstaff 2023-02-08 19:27:58 CET
I upgraded my VMs to 5.0-3 and for me it is still failing:

univention-run-join-scripts --run-scripts 30univention-monitoring-client
> Running 30univention-monitoring-client.inst                failed (exitcode: 1)


tail /var/log/univention/join.log
> 2023-02-08 17:40:05.567381639+01:00 (in joinscript_init)
> Object exists: cn=monitoring,dc=phahn,dc=dev
> Object exists: cn=ldapschema,cn=univention,dc=phahn,dc=dev
> Object exists: cn=ldapacl,cn=univention,dc=phahn,dc=dev
> No modification: cn=univention-monitoring,cn=ldapschema,cn=univention,dc=phahn,dc=dev
> No modification: cn=62univention-monitoring,cn=ldapacl,cn=univention,dc=phahn,dc=dev
> Waiting for activation of the extension object univention-monitoring: ......INFO: No change of core data of object univention-monitoring.
> INFO: No change of core data of object 62univention-monitoring.
> ERROR: Primary Directory Node did not mark the extension object active within 180 seconds.
> ERROR
> ucs_registerLDAPExtension: registraton of /usr/lib/univention-monitoring-client/schema/univention-monitoring.schema failed.
> 30univention-monitoring-client.inst: LDAP Schema/ACL
> EXITCODE=1
Comment 13 Lukas Rettler univentionstaff 2023-03-16 10:41:51 CET
In our context the following helped:

udm settings/ldapacl remove --dn "cn=62univention-monitoring,cn=ldapacl,cn=univention,$(ucr get ldap/base)"
udm settings/ldapschema remove --dn "cn=univention-monitoring,cn=ldapschema,cn=univention,dc=app,$(ucr get ldap/base)"

univention-run-join-scripts --run-scripts 30univention-monitoring-client --force

univention-run-join-scripts: runs all join scripts existing on local computer.
copyright (c) 2001-2022 Univention GmbH, Germany

Running pre-joinscripts hook(s):                           done
Running 30univention-monitoring-client.inst                done
Running post-joinscripts hook(s):                          done

Works for us under UCS 5.0-2 e610