Univention Bugzilla – Full Text Bug Listing |
Summary: | Join hangs because of upper/lowercase mismatch | ||
---|---|---|---|
Product: | UCS | Reporter: | Michael Grandjean <grandjean> |
Component: | SSL | Assignee: | Philipp Hahn <hahn> |
Status: | CLOSED FIXED | QA Contact: | Felix Botner <botner> |
Severity: | normal | ||
Priority: | P5 | CC: | best, gohmann, hahn |
Version: | UCS 4.1 | ||
Target Milestone: | UCS 4.1-4-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
See Also: |
https://forge.univention.org/bugzilla/show_bug.cgi?id=37816 https://forge.univention.org/bugzilla/show_bug.cgi?id=42124 |
||
What kind of report is it?: | Bug Report | What type of bug is this?: | 6: Setup Problem: Issue for the setup process |
Who will be affected by this bug?: | 1: Will affect a very few installed domains | How will those affected feel about the bug?: | 2: A Pain – users won’t like this once they notice it |
User Pain: | 0.069 | Enterprise Customer affected?: | Yes |
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | 2016090521000405 | Bug group (optional): | Error handling, External feedback |
Max CVSS v3 score: | |||
Bug Depends on: | |||
Bug Blocks: | 43381 |
Description
Michael Grandjean
2015-08-03 15:10:09 CEST
Might be caused by Bug #37816 ? We can do a "hostname = hostname.lower()" in the UMC backend of system-setup. Ticket#2016090521000405 The Listener module uses the casing from LDAP, while the host tries to find the certificate using his writing. 4.1-4: r74975 | Bug #39068 join: Strip root DNS zone r74974 | Bug #39068 join: Use hostname from LDAP r74973 | Bug #39068 join: Only used 1st entry 4.2-0: r74983 | Bug #39068 join: Strip root DNS zone r74982 | Bug #39068 join: Use hostname from LDAP r74981 | Bug #39068 join: Only used 1st entry YAML: r74976 | Bug #39068,Bug #39179,Bug #42837: SSL Package: univention-join Version: 8.0.4-6.520.201612051533 Branch: ucs_4.1-0 Scope: errata4.1-4 QA: ucr set hostname=$(ucr get hostname|tr '[:upper:][:lower:]' '[:lower:][:upper:]') univention-join FYI: If the casing of $domainname does not match, things go wrong very bad - not touched! The join.log now throws the following error: univention-server-join: joins a server to an univention domain copyright (c) 2001-2016 Univention GmbH, Germany ldap_dn="cn=slave094,cn=dc,cn=computers,dc=autotest094,dc=local" Traceback (most recent call last): File "<stdin>", line 13, in <module> IOError: [Errno 2] No such file or directory: '/etc/machine.secret' Setting hostname See here: http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-4/job/AutotestJoin/SambaVersion=s3,Systemrolle=slave/ws/join.log This is recognized by the test case 99check_log_files: http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-4/job/AutotestJoin/SambaVersion=s3,Systemrolle=slave/lastCompletedBuild/testReport/00_checks/99check_log_files/test/ I guess these changes are responsible for the error. One other comment while reading you comment: (In reply to Philipp Hahn from comment #3) > r74975 | Bug #39068 join: Strip root DNS zone Does it have something to do with this bug? If not, please file a new bug and fix it through the new bug. If yes, I'm fine with it. (In reply to Stefan Gohmann from comment #4) > The join.log now throws the following error: > > univention-server-join: joins a server to an univention domain > copyright (c) 2001-2016 Univention GmbH, Germany > > ldap_dn="cn=slave094,cn=dc,cn=computers,dc=autotest094,dc=local" > Traceback (most recent call last): > File "<stdin>", line 13, in <module> > IOError: [Errno 2] No such file or directory: '/etc/machine.secret' > Setting hostname This is triggered by ucr set ldap/hostdn=... while /etc/machine.secret does not yet exists. The culprit is ucr commit /etc/postgresql/pam_ldap.conf > I guess these changes are responsible for the error. UCS-4.1-4: r75074 | Bug #39068 join: Only update hostane and hosdn after /etc/machine.secret YAML: r75075 | Bug #39068 join: Only update hostane and hosdn after /etc/machine.secret YAML UCS-4.2-0: r75076 | Bug #39068 join: Only update hostane and hosdn after /etc/machine.secret Package: univention-join Version: 8.0.4-7.521.201612071726 Branch: ucs_4.1-0 Scope: errata4.1-4 > One other comment while reading you comment: > > (In reply to Philipp Hahn from comment #3) > > r74975 | Bug #39068 join: Strip root DNS zone > > Does it have something to do with this bug? If not, please file a new bug > and fix it through the new bug. If yes, I'm fine with it. Found while testing my change: any decent UNIX tool understand how to handle an explicit trailing dot; UCS doesn't and breaks badly. OK - normal join (no computer object in ldap) OK - join "backup" with object BackUP present -> hostname BackUP OK - join BACKUP with object backup present -> hostname backup OK - code OK - YAML OK - merged to 4.2-0 I removed 3 from the yaml version (4.1-3 is no longer maintained) |