Bug 57426 - automatic restart of ucsschool-id-connector after update-ca-certificates doesnt work as expected
Summary: automatic restart of ucsschool-id-connector after update-ca-certificates does...
Status: RESOLVED MOVED
Alias: None
Product: UCS@school
Classification: Unclassified
Component: ucsschool-id-connector
Version: UCS@school 5.0
Hardware: Other All
: P5 normal
Target Milestone: ---
Assignee: Ole Schwiegert
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-04 17:35 CEST by Dirk Ahrnke
Modified: 2024-07-31 07:57 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Regression
Customer ID: 44145
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Ahrnke univentionstaff 2024-07-04 17:35:30 CEST 
https://docs.software-univention.de/ucsschool-id-connector/admin.html#sending-system states
"The app is using the CA trust store from the UCS host system. The app is restarting if the certificates are updated by update-ca-certificates,..."

This doesnt work because

root@server:~# head -1 /etc/ca-certificates/update.d/ucsschool-id-connector
#!/usr/bin/sh
root@server:~# ls -l /usr/bin/sh
ls: Zugriff auf '/usr/bin/sh' nicht möglich: Datei oder Verzeichnis nicht gefunden
Comment 1 Jürn Brodersen univentionstaff 2024-07-05 09:42:26 CEST 
This happens only on systems that were updated from 4.4.

I only tested on a fresh install :( (Keyword usrmerge https://wiki.debian.org/UsrMerge for some reason I thought we had done this)

We should use `/usr/bin/env sh` which is available on both 5.0 and 4.4.