Bug 56794 - UCS@school Slave join during the installation is not possible - ucs-school-replica is not going to be installed
UCS@school Slave join during the installation is not possible - ucs-school-re...
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-5-errata
Assigned To: Arvid Requate
Felix Botner
Depends on:
  Show dependency treegraph
Reported: 2023-11-02 19:15 CET by Mirac Erdemiroglu
Modified: 2023-11-29 14:56 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023103021000164
Bug group (optional): Workaround is available
Max CVSS v3 score:

join.log (11.00 KB, text/x-log)
2023-11-02 19:15 CET, Mirac Erdemiroglu
config-registry.replog (66.87 KB, text/plain)
2023-11-02 19:15 CET, Mirac Erdemiroglu

Note You need to log in before you can comment on or make changes to this bug.
Description Mirac Erdemiroglu univentionstaff 2023-11-02 19:15:22 CET
Created attachment 11139 [details]

My test systems:

root@ucs5master:~/univention-support# univention-app info
UCS: 5.0-5 errata871
Installed: ucsschool=5.0 v4
root@ucs5master:~/univention-support# ucr get server/role

root@Buggyschool:~# univention-app info
UCS: 5.0-5 errata871
Installed: ucsschool=5.0 v4
root@Buggyschool:~# ucr get server/role

The univention-join of a replica node/school slave is not possible if it is done via the installation wizard. If the checkbox "join during installation" is checked, the following error occurs every time.

I attached the join.log and the config-registry.replog from the replica-node /school-slave. 

If you need more information or access to the test system, just contact me.

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 ucs-school-replica : Depends: univention-s4-connector (>= 6.0.128-24) but it is not going to be installed or
                               univention-samba-slave-pdc but it is not installable
W: --force-yes is deprecated, use one of the options starting with --allow instead.
E: Unable to correct problems, you have held broken packages.

Setting repository/online
File: /etc/apt/mirror.list
File: /etc/apt/sources.list.d/15_ucs-online-version.list
File: /etc/apt/sources.list.d/20_ucs-online-component.list
ERROR: join/pre-joinscripts hook /tmp/tmpfg71wzfc/tmpxfr2m6a4 failed.

* Join failed!                                                           *
* Contact your system administrator                                      *
* Message:  Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- join/pre-joinscripts failed, see /var/log/univention/join.log
Comment 1 Mirac Erdemiroglu univentionstaff 2023-11-02 19:15:56 CET
Created attachment 11140 [details]
Comment 2 Mirac Erdemiroglu univentionstaff 2023-11-02 19:19:05 CET
Customer affected: 2023103021000164
UCS: 5.0-5 errata857
Installed: ucsschool=5.0 v4
Comment 4 Mirac Erdemiroglu univentionstaff 2023-11-02 20:04:16 CET
Workaround or normal workflow:

During installation, uncheck the "Join during installation" box. 
Once the system is fully installed and upgraded to the latest version, perform the join manually via terminal.
Login as root to the ucs@school slave and use following command:

Comment 5 Arvid Requate univentionstaff 2023-11-27 12:48:44 CET
686c9cb02 | samba-ad-dc depends on specific version of samba-dsdb-modules
f7aed51ab6 | Advisory update
Comment 6 Felix Botner univentionstaff 2023-11-27 13:01:54 CET
UCS 5.0-5 without samba4 app (but some old samba-dsdb-modules installed) + internal errata5.0-5 repo

univention-samba4 still fails with 

$ apt-get -s install univention-samba4
univention-samba4 : Hängt ab von: samba-dsdb-modules (>= 2:4.16.2-1A~ soll aber nicht installiert werden

also samba 
$ apt-get -s install samba
Die folgenden Pakete werden ENTFERNT:

samba-ad-dc is fine

$ apt-get -s install samba-ad-dc
Die folgenden Pakete werden aktualisiert (Upgrade):
  ... samba-dsdb-modules samba-libs smbclient
Comment 7 Arvid Requate univentionstaff 2023-11-27 14:20:47 CET
As discussed, let's update this dependency:

8a2ff533ae | Make univention-samba4 depend on samba-ad-dc

I also checked the history of the upstream Debian packaging git
and there is this statement, which confirms our plan:

"To use samba as an Active Directory domain controller (AD DC), please install
 samba-ad-dc package."
Comment 8 Felix Botner univentionstaff 2023-11-27 15:13:18 CET
OK - installation of univention-samba4 (with samba-dsdb-modules already installed)
OK - installation of univention-samba
OK - yaml