Bug 56925 - UCS@school can´t join school-replicas/slaves into the domain - python-ucs-school should not be installed
UCS@school can´t join school-replicas/slaves into the domain - python-ucs-sch...
Status: RESOLVED WONTFIX
Product: UCS@school
Classification: Unclassified
Component: Join - Hook
UCS@school 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS@school maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-12-19 12:05 CET by Mirac Erdemiroglu
Modified: 2023-12-20 17:26 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.086
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023120421000469
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mirac Erdemiroglu univentionstaff 2023-12-19 12:05:03 CET
UCS: 5.0-4 errata887
Installed: pkgdb=11.0 prometheus-node-exporter=2.0.1 samba4=4.16 self-service-backend=5.0 ucsschool=5.0 v4 4.4/ucsschool-kelvin-rest-api=1.8.10
Upgradable: ucsschool-kelvin-rest-api


It is not possible to join a UCS replica to the domain because dependent packages for the join cannot be installed.


The following packages have unfulfilled dependencies:

ucs-school-umc-installer : Depends on: python-ucs-school but should not be installed

Depends on: python3-ucsschool-lib but should not be installed

Depends on: univention-management-console-server (>= 12.0.31-10) but 12.0.17-3A~5.0.0.202302071823 should be installed


File: /usr/share/univention-management-console/modules/apps.xml


File: /etc/apt/apt.conf.d/55user_agent

File: /usr/share/univention-management-console/i18n/en/apps.mo

Create repository/online


File: /etc/apt/mirror.list


File: /etc/apt/sources.list.d/15_ucs-online-version.list


File: /etc/apt/sources.list.d/20_ucs-online-component.list


ERROR: join/pre-joinscripts hook /tmp/tmpnh0xi_zo/tmposdjsx5l failed.


**************************************************************************


* Join failed!                                                           *


* Contact your system administrator *


**************************************************************************
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2023-12-19 14:57:53 CET
> Depends on: univention-management-console-server (>= 12.0.31-10) but 12.0.17-3A~5.0.0.202302071823 should be installed

The dependency change of ucs-school-umc-installer requires univention-management-console-server >= 12.0.31-10 but this is fulfilled beginning with UCS 5.0-4errata765.

WARNING: The ucsschool app does not set a minimal version to 5.0-4 errata765 !

This may but does not have to be the reason.

Is "UCS: 5.0-4 errata887" the version of the primary domain controller or of the replica?
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2023-12-19 14:58:41 CET
> The dependency change of ucs-school-umc-installer requires
> univention-management-console-server >= 12.0.31-10 but this is fulfilled
> beginning with UCS 5.0-4errata765.
> 
> WARNING: The ucsschool app does not set a minimal version to 5.0-4 errata765
> !
→ Dependency introduced here: https://forge.univention.org/bugzilla/show_bug.cgi?id=56390
Comment 3 Jan-Luca Kiok univentionstaff 2023-12-19 17:28:49 CET
We believe that this situation arose because the replica to join was not updated to >= 5.0-4 errata765, but the Primary is (5.0-4 errata887).
The replica tries to install the same version of UCS@school that is installed on the primary (in this case 5.0 v4), which needs to mentioned erratum. To resolve this the replica should be updated before trying to join.
Comment 4 Jan-Luca Kiok univentionstaff 2023-12-19 17:29:56 CET
(In reply to Jan-Luca Kiok from comment #3)
> We believe that this situation arose because the replica to join was not
> updated to >= 5.0-4 errata765, but the Primary is (5.0-4 errata887).
> The replica tries to install the same version of UCS@school that is
> installed on the primary (in this case 5.0 v4), which needs to mentioned
> erratum. To resolve this the replica should be updated before trying to join.

...saved too soon:
If this is not the culprit or this does not work for you feel free to reopen the bug.
Comment 5 Mirac Erdemiroglu univentionstaff 2023-12-20 09:27:24 CET
Thank you for all that help and information on this bug but, where is that Information documented?

The dependency change of ucs-school-umc-installer requires univention-management-console-server >= 12.0.31-10 but this is fulfilled beginning with UCS 5.0-4errata765
Comment 6 Jan-Luca Kiok univentionstaff 2023-12-20 17:26:36 CET
(In reply to Mirac Erdemiroglu from comment #5)
> Thank you for all that help and information on this bug but, where is that
> Information documented?

Depends a bit on what part of that information you mean. Let's split that:


1. The dependency of UCS@school 5.0 v4 to erratum 765

UCS@school is closely tied to UCS in several ways. As with every app the underlying UCS system should be fully updated before installing the current app version of UCS@school - I don't see that stated in the manual and we could have made that clearer, but this applies to all apps: Don't install an app version to was released after to certain erratum to a UCS system that is not updated to that erratum.

The dependency was introduced on the 25th of October when erratum 857 was latest and 9 weeks after erratum 765 itself.

I agree that it would be better to make that explicit in the future.


2. The mismatch of Primary and Replica

This would have not happened if the UCS version of the Primary would have been as old as the one of the Replica. In this case we can assume that the Replica was on a level when UCS@school 5.0 v3 was still recent - That erratalevel is unsupported in UCS@school as well as in UCS nowadays. If both systems would have been this old the join (and subsequent updates) should have worked nonetheless, but joining an unsupported server into recent domain is not a good idea in any case.
Once again I was unable to find a place that states that explicitly.