Bug 37333

Summary: /usr/lib/univention-system-setup/scripts/90_postjoin//10admember exited with return code 1
Product: UCS Reporter: Stefan Gohmann <gohmann>
Component: System setupAssignee: Alexander Kläser <klaeser>
Status: CLOSED FIXED QA Contact: Erik Damrose <damrose>
Severity: normal    
Priority: P5 CC: damrose, klaeser, luft, requate
Version: UCS 4.0   
Target Milestone: UCS 4.1-3   
Hardware: Other   
OS: Linux   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on:    
Bug Blocks: 40046    
Attachments: autotest-228-admember-w2k12-german-other-join-user.log

Description Stefan Gohmann univentionstaff 2014-12-15 09:36:44 CET
Created attachment 6529 [details]
autotest-228-admember-w2k12-german-other-join-user.log

From Jenkins tests:

-------------------------------------------------------------------------------
__MSG__:Renaming well known SID objects...
__ERR__:[Errno 2] No such file or directory
Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/management/console/modules/setup/setup_script.py", line 304, in run
    success = self.inner_run()
  File "/usr/lib/univention-system-setup/scripts/90_postjoin//10admember", line 103, in inner_run
    admember.rename_well_known_sid_objects(username, password)
  File "/usr/lib/pymodules/python2.7/univention/lib/admember.py", line 848, in rename_well_known_sid_objects
    close_fds=True)
  File "/usr/lib/python2.7/subprocess.py", line 679, in __init__
    errread, errwrite)
  File "/usr/lib/python2.7/subprocess.py", line 1259, in _execute_child
    raise child_exception
OSError: [Errno 2] No such file or directory

run-parts: /usr/lib/univention-system-setup/scripts/90_postjoin//10admember exited with return code 1
-------------------------------------------------------------------------------

<http://jenkins.knut.univention.de:8080/job/UCS-4.0/job/UCS-4.0-0/job/AD%20Member%20MultiEnv/Mode=installation,Version=w2k12-german-other-join-user/8/>
Comment 1 Arvid Requate univentionstaff 2014-12-15 15:08:00 CET
Looks like univention-ad-connector has not been installed.

This could be fixed for ucs-test by specifying univention-ad-connector in the test dependencies.

IMHO the USS script for AD Member setup should take care on a DC Master that this gets installed (just like it installs univention-samba by running univention.lib.admember.remove_install_univention_samba).
Comment 2 Stefan Gohmann univentionstaff 2016-02-26 14:53:55 CET
(In reply to Arvid Requate from comment #1)
> Looks like univention-ad-connector has not been installed.
> 
> This could be fixed for ucs-test by specifying univention-ad-connector in
> the test dependencies.

No, it is not the result of the test cases. It is a problem of the setup.
Comment 3 Alexander Kläser univentionstaff 2016-06-16 13:06:32 CEST
At Bug 40046, comment 16, we observed the same error. Is that critical? In this scenario we were testing an AD join with a new UCS appliance being re-joined (as the appliance had been pre-joined to allow a fast setup process option).

> Created attachment 7687 [details]
> setup.log: failed ad join
> 
> AD Join fails in 90_postjoin/10admember with the following traceback,
> setup.log is attached:
> Traceback (most recent call last):
>   File
> "/usr/lib/pymodules/python2.7/univention/management/console/modules/setup/
> setup_script.py", line 304, in run
>     success = self.inner_run()
>   File "/usr/lib/univention-system-setup/scripts/90_postjoin/10admember",
> line 111, in inner_run
>     admember.rename_well_known_sid_objects(username, password)
>   File "/usr/lib/pymodules/python2.7/univention/lib/admember.py", line 865,
> in rename_well_known_sid_objects
>     close_fds=True)
>   File "/usr/lib/python2.7/subprocess.py", line 679, in __init__
>     errread, errwrite)
>   File "/usr/lib/python2.7/subprocess.py", line 1259, in _execute_child
>     raise child_exception
> OSError: [Errno 2] No such file or directory
Comment 4 Arvid Requate univentionstaff 2016-06-16 13:19:40 CEST
> OSError: [Errno 2] No such file or directory

Something getting run at that point is not present. The method rename_well_known_sid_objects calls well-known-sid-object-rename, which is part of univention-ad-connector. So it's fair to assume that Comment 1 applies.

> Is that critical?

Depends, if univention-ad-connector had been installed explicitly then this suggests that it has been removed, which could be considered critical. Otherwise probably not.
Comment 5 Arvid Requate univentionstaff 2016-06-16 13:54:12 CEST
Ok, as discussed with Alex, this is not a ucs-test case issue but one of the system setup software selection:

/usr/lib/univention-system-setup/scripts/90_postjoin/10admember is part of univention-system-setup and runs into this problem if "ad/member" is enabled *and* the AD-Connector has not been installed. Probably system-setup should automatically select the AD-connector component (and make it so that the user cannot de-select it in the software selection dialogue.
Comment 6 Erik Damrose univentionstaff 2016-07-15 16:06:15 CEST
Has to be fixed, or app appliances wont be able to join as AD member, setting milestone to 4.1-3 errata
Comment 7 Stefan Gohmann univentionstaff 2016-07-15 16:16:06 CEST
If it happens now always, we should fix it as 4.1-2-errata.
Comment 8 Stefan Gohmann univentionstaff 2016-08-02 07:16:22 CEST
Checking with UCS 4.1-3.
Comment 9 Alexander Kläser univentionstaff 2016-08-05 16:46:16 CEST
I removed the code in the UMC frontend that auto selects the adconnector component. Instead, univention-ad-connector is added on the backend side. This should be more robust in any case.

univention-system-setup (9.0.4-34):
r71439 | Bug #37333: auto-install univention-ad-connector for AD member mode
Comment 10 Erik Damrose univentionstaff 2016-08-08 17:12:46 CEST
OK: u-ad-connector gets installed for AD join even if the package is unchecked on the software page
Reopen: changelog missing
Comment 11 Alexander Kläser univentionstaff 2016-08-09 10:45:56 CEST
(In reply to Erik Damrose from comment #10)
> OK: u-ad-connector gets installed for AD join even if the package is
> unchecked on the software page
> Reopen: changelog missing

True :) ... fixed.

r71463 | Bug #37333: added changelog entry
Comment 12 Erik Damrose univentionstaff 2016-08-09 10:50:35 CEST
Thanks, Verified :)
Comment 13 Alexander Kläser univentionstaff 2016-08-09 11:43:29 CEST
*** Bug 39371 has been marked as a duplicate of this bug. ***
Comment 14 Stefan Gohmann univentionstaff 2016-08-09 15:26:05 CEST
UCS 4.1-3 has been released:
 https://docs.software-univention.de/release-notes-4.1-3-en.html
 https://docs.software-univention.de/release-notes-4.1-3-de.html

If this error occurs again, please use "Clone This Bug".