Bug 36937

Summary: rdate in univention-system-setup/40_ssl/10ssl got stuck
Product: UCS Reporter: Philipp Hahn <hahn>
Component: System setupAssignee: Philipp Hahn <hahn>
Status: CLOSED FIXED QA Contact: Sönke Schwardt-Krummrich <schwardt>
Severity: normal    
Priority: P5 CC: da, gohmann, jmm
Version: UCS 4.0   
Target Milestone: UCS 4.0-0-errata   
Hardware: Other   
OS: Linux   
URL: http://forum.univention.de/viewtopic.php?f=48&t=3596&p=12788
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on: 36934    
Bug Blocks:    

Description Philipp Hahn univentionstaff 2014-11-21 16:12:39 CET
+++ This bug was initially created as a clone of Bug #36934 +++
univention-system-setup/usr/lib/univention-system-setup/scripts/40_ssl/10ssl is using the same broken code from univention-ssl, where rdate might get stuck.
Comment 1 Philipp Hahn univentionstaff 2014-11-21 17:07:53 CET
r56064 | Bug #36934 SSL: Timeout ntpdate command after 15s
 (actually its USS)

Package: univention-system-setup
Version: 8.1.64-1.787.201411211651
User: phahn
Branch: ucs_4.0-0
Scope: errata4.0-0

r56068 | Bug #36934 SSL,Bug #36935 Join,Bug #36937 USS: timeout YAML
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2014-11-26 17:11:05 CET
root@master40:~# timeout -k 20 15 ntpdate-debian
25 Nov 19:40:06 ntpdate[8714]: no servers can be used, exiting

On my UCS master test system /etc/default/ntpdate was empty
→ $NTPDATE_USE_NTP_CONF is not set (used within ntpdate-debian)
→ /var/lib/ntpdate/default.dhcp does not exist
→ no time server is given to ntpdate
→ error message from above
→ REOPEN

Why not using one of the following pools?
- 0.pool.ntp.org
- 1.pool.ntp.org
- 2.pool.ntp.org
- 3.pool.ntp.org

root@master40:~# time timeout -k 20 15 rdate 10.200.18.3

real    0m15.003s
user    0m0.004s
sys     0m0.000s
root@master40:~# time timeout -k 20 15 rdate 192.168.0.3
Wed Nov 26 17:01:49 CET 2014

real    1269m58.097s
user    0m0.000s
sys     0m0.000s
root@master40:~# time timeout -k 20 15 rdate 192.168.0.3
Wed Nov 26 17:01:59 CET 2014

real    0m0.000s
user    0m0.000s
sys     0m0.004s
root@master40:~# 

→ Works as expected.

OK: removing duplicate dependencies
FAIL: why adding rdate as dependency? ntpdate-debian uses ntpdate

YAML: not checked yet
Comment 3 Philipp Hahn univentionstaff 2014-11-28 11:55:01 CET
r56276 | Bug #36937 USS: Timeout rdate command after 15+5s
 Use rdate again with fixed
  10.1.133.130.in-addr.arpa domain name pointer time.fu-berlin.de.
 Reduce SIGKILL timeout to 5s.

r56279 | YAML Bug #36334 Bug #36937: timeout rdate
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2014-11-28 12:31:53 CET
OK: code change visibly checked
OK: YAML

Waiting for new DVD for functional check
Comment 5 Philipp Hahn univentionstaff 2014-11-28 12:37:05 CET
r56283 | Bug #36937: Timeout rdate command after 15+5s
r56286 | YAML Bug #36334 Bug #36937: timeout rdate

Package: univention-ssl
Version: 9.0.4-3.152.201411281214
User: phahn
Branch: ucs_4.0-0
Scope: errata4.0-0

Package: univention-system-setup
Version: 8.1.65-24.811.201411281217
User: phahn
Branch: ucs_4.0-0
Scope: errata4.0-0
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2014-12-01 14:22:18 CET
No problems encountered during installation.
Comment 7 Moritz Muehlenhoff univentionstaff 2014-12-04 12:22:27 CET
http://errata.univention.de/ucs/4.0/2.html