Bug 56289 - 91univention-saml.inst: E: Zone ***.** does not exist.
91univention-saml.inst: E: Zone ***.** does not exist.
Status: NEW
Product: UCS
Classification: Unclassified
Component: UCS Installer
UCS 5.0
Other Windows NT
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-07-07 16:39 CEST by Maximilian Janßen
Modified: 2023-07-07 16:39 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2022123021000395
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Maximilian Janßen univentionstaff 2023-07-07 16:39:21 CEST
Version: 5.0-2 errata528

Remark: standard install, no open ports or anything to the server

Error:
Domain setup (this might take a while): FAILED: /usr/lib/univention-install/05univention-bind.inst
Configure 05univention-bind.inst Fri Dec 30 20:39:03 CET 2022
2022-12-30 20:39:03.686861729+01:00 (in joinscript_init)
Failed creating the DNS zone ***.**.\nCommand failed with 1:\nE: failed nameserver: A hostname or any part of a FQDN, separated by dots, starts and ends with a
letter or a digit. In between letters, digits, dashes and underscores are allowed. Only numbers are not allowed.
Adding ZONE record "root@***.**. 1 28800 7200 604800 10800 1.***.**." to zone ***.**...
Traceback (most recent call last):
  File "/usr/share/univention-admin-tools/univention-dnsedit", line 452, in <module>
    main()
  File "/usr/share/univention-admin-tools/univention-dnsedit", line 433, in main
    add_zone(*args)
  File "/usr/share/univention-admin-tools/univention-dnsedit", line 391, in add_zone
    zone['nameserver'] = list(nameserver)
  File "%PY3%/univention/admin/handlers/__init__.py", line 430, in __setitem__
    raise univention.admin.uexceptions.valueInvalidSyntax("%s: %s" % (key, err), property=key)
univention.admin.uexceptions.valueInvalidSyntax: nameserver: A hostname or any part of a FQDN, separated by dots, starts and ends with a letter or a digit. In between letters,
digits, dashes and underscores are allowed. Only numbers are not allowed.
__JOINERR__:FAILED: /usr/lib/univention-install/05univention-bind.inst
05univention-bind.inst:

Domain setup (this might take a while): FAILED: /usr/lib/univention-install/15univention-heimdal-kdc.inst
Configure 15univention-heimdal-kdc.inst Fri Dec 30 20:39:24 CET 2022
2022-12-30 20:39:24.311891834+01:00 (in joinscript_init)
/etc/machine.secret: No such file or directory
E: Zone ***.** does not exist.

__JOINERR__:FAILED: /usr/lib/univention-install/15univention-heimdal-kdc.inst

Domain setup (this might take a while): FAILED: /usr/lib/univention-install/20univention-directory-policy.inst
Configure 20univention-directory-policy.inst Fri Dec 30 20:39:25 CET 2022
2022-12-30 20:39:25.818795860+01:00 (in joinscript_init)
usage: nfsmounts [-h] [-s] [-v]
nfsmounts: error: ldap/hostdn is not set.
run-parts: /usr/lib/univention-directory-policy/nfsmounts exited with return code 2
usage: univention-policy-update-config-registry [-h] [-a] [-s] [-v]
                                                [-l SERVER] [-y PASSWORD_FILE]
                                                [hostdn]
univention-policy-update-config-registry: error: argument -y/--password-file: can't open '/etc/machine.secret': [Errno 2] No such file or directory: '/etc/machine.secret'
run-parts: /usr/lib/univention-directory-policy/univention-policy-update-config-registry exited with return code 2

__JOINERR__:FAILED: /usr/lib/univention-install/20univention-directory-policy.inst

Domain setup (this might take a while): FAILED: /usr/lib/univention-install/20univention-ldap-config-master.inst
Configure 20univention-ldap-config-master.inst Fri Dec 30 20:39:32 CET 2022
2022-12-30 20:39:32.083753350+01:00 (in joinscript_init)
Traceback (most recent call last):
  File "/usr/share/univention-directory-manager-tools/univention-cli-server", line 213, in doit
    output = univention.admincli.admin.doit(arglist)
  File "%PY3%/univention/admincli/admin.py", line 365, in doit
    out = _doit(arglist)
  File "%PY3%/univention/admincli/admin.py", line 640, in _doit
    out.extend(cli.create(input, append, ignore_exists, parsed_options, parsed_append_options, parsed_remove_options, policy_reference))
  File "%PY3%/univention/admincli/admin.py", line 668, in create
    return self._create(self.module_name, self.module, self.dn, self.lo, self.position, self.superordinate, *args, **kwargs)
  File "%PY3%/univention/admincli/admin.py", line 704, in _create
    out.extend(object_input(module, object, input, append=append))
  File "%PY3%/univention/admincli/admin.py", line 347, in object_input
    object[key] = value
  File "%PY3%/univention/admin/handlers/__init__.py", line 443, in __setitem__
    p = s.parse(value)
  File "%PY3%/univention/admin/syntax.py", line 466, in parse
    return super(combobox, cls).parse(text) or text
  File "%PY3%/univention/admin/syntax.py", line 410, in parse
    choices = getattr(self, "choices")
  File "%PY3%/univention/admin/syntax.py", line 3618, in choices
    return cls._auto_choices()
  File "%PY3%/univention/admin/syntax.py", line 3639, in _auto_choices
    conn = getMachineConnection()
  File "%PY3%/univention/uldap.py", line 168, in getMachineConnection
    bindpw = open(secret_file).read().rstrip('\n')
FileNotFoundError: [Errno 2] No such file or directory: '/etc/machine.secret'

__JOINERR__:FAILED: /usr/lib/univention-install/20univention-ldap-config-master.inst

Domain setup (this might take a while): FAILED: /usr/lib/univention-install/30univention-nagios-client.inst
Configure 30univention-nagios-client.inst Fri Dec 30 20:45:42 CET 2022
2022-12-30 20:45:42.149224824+01:00 (in joinscript_init)
File: /etc/nagios/nrpe.cfg
E: DN is missing

__JOINERR__:FAILED: /usr/lib/univention-install/30univention-nagios-client.inst

Domain setup (this might take a while): FAILED: /usr/lib/univention-install/91univention-saml.inst
Configure 91univention-saml.inst Fri Dec 30 21:10:04 CET 2022
2022-12-30 21:10:04.899093579+01:00 (in joinscript_init)
Create saml/idp/certificate/privatekey
Create saml/idp/certificate/certificate
Create saml/idp/entityID
Create ucs/server/sso/fqdn
Multifile: /etc/simplesamlphp/metadata/saml20-idp-hosted.php
File: /etc/stunnel/univention_saml.conf
File: /etc/apache2/sso-vhost.conf.d/01redirect.conf
File: /etc/apache2/sites-available/univention.conf
File: /etc/apache2/sites-available/univention-saml.conf
File: /etc/apache2/sites-available/univention-portal.conf
chown: invalid group: ‘root:DC Backup Hosts’
Creating SAML user
Make SAML user a system user
Multifile: /etc/simplesamlphp/authsources.php
Creating certificate: ucs-sso.***.**
/etc/machine.secret: No such file or directory
Generating RSA private key, 2048 bit long modulus (2 primes)
...................+++++
...............................................................................................................................+++++
e is *** (0x***)
Using configuration from /etc/univention/ssl/openssl.cnf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'GB'
stateOrProvinceName   :PRINTABLE:'GB'
localityName          :PRINTABLE:'GB'
organizationName      :PRINTABLE:'***'
organizationalUnitName:PRINTABLE:'Univention Corporate Server'
commonName            :PRINTABLE:'ucs-sso.***.**'
emailAddress          :IA5STRING:'***@***.**'
Certificate is to be certified until Dec 29 20:10:08 2027 GMT (1825 days)

Write out database with 1 new entries
Data Base Updated
File: /etc/apache2/sites-available/univention-saml.conf
E: Zone ***.** does not exist.

__JOINERR__:FAILED: /usr/lib/univention-install/91univention-saml.inst


Role: domaincontroller_master