Bug 40575

Summary:	CRITICAL:__main__:OpenLDAP slapd is running; aborting
Product:	UCS	Reporter:	Stefan Gohmann <gohmann>
Component:	LDAP	Assignee:	Philipp Hahn <hahn>
Status:	CLOSED FIXED	QA Contact:	Stefan Gohmann <gohmann>
Severity:	normal
Priority:	P5	CC:	best, hahn, walkenhorst
Version:	UCS 4.1	Flags:	hahn: Patch_Available+
Target Milestone:	UCS 4.1-1-errata
Hardware:	Other
OS:	Linux
See Also:	https://forge.univention.org/bugzilla/show_bug.cgi?id=39866 https://forge.univention.org/bugzilla/show_bug.cgi?id=40886
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Attachments:	Kill OpenLDAP slapd during upgrade

Description Stefan Gohmann

2016-02-03 20:26:18 CET

The message is shown during a normal package upgrade on a DC master:
---------------------------------------------------------------------------
univention-ldap-server (12.1.6-21.811.201602031616) wird eingerichtet ...
File: /etc/init.d/slapd
File: /var/lib/univention-ldap/ldap/DB_CONFIG
File: /etc/cron.d/univention-ldap
Multifile: /etc/ldap/slapd.conf
Not updating ldap/translogfile
Setting security/packetfilter/package/univention-ldap-server/tcp/389/all
Setting security/packetfilter/package/univention-ldap-server/tcp/389/all/en
Setting security/packetfilter/package/univention-ldap-server/tcp/636/all
Setting security/packetfilter/package/univention-ldap-server/tcp/636/all/en
Setting security/packetfilter/package/univention-ldap-server/tcp/7389/all
Setting security/packetfilter/package/univention-ldap-server/tcp/7389/all/en
Setting security/packetfilter/package/univention-ldap-server/tcp/7636/all
Setting security/packetfilter/package/univention-ldap-server/tcp/7636/all/en
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
Stopping Univention iptables configuration::.
Starting Univention iptables configuration::.
Not updating ldap/debug/level
Not updating slapd/port
Not updating slapd/port/ldaps
Not updating ldap/database/type
Not updating ldap/database/mdb/maxsize
Not updating ldap/sizelimit
Not updating ldap/cachesize
Not updating ldap/idlcachesize
Not updating ldap/idletimeout
Not updating ldap/index/autorebuild
Not updating ldap/threads
Not updating ldap/tool-threads
Not updating ldap/acl/user/password/change
Not updating ldap/acl/slavepdc
Not updating ldap/acl/nestedgroups
Not updating ldap/database/bdb/db_config_options
Not updating ldap/database/bdb/set_flags
Not updating ldap/autostart
Not updating ldap/tls/dh/paramfile
Not updating ldap/maxopenfiles
Not updating ldap/acl/read/anonymous
Multifile: /etc/ldap/slapd.conf
CRITICAL:__main__:OpenLDAP slapd is running; aborting
---------------------------------------------------------------------------

Comment 1 Philipp Hahn

2016-02-04 08:06:30 CET

This is a Bug introduced accidentally by r66668 (Bug #39866), where the "stop_slapd" was removed before doing the
/usr/share/univention-ldap/ldap_setup_index

Comment 2 Philipp Hahn

2016-02-04 08:07:43 CET

Created attachment 7450 [details]
Kill OpenLDAP slapd during upgrade

Comment 3 Philipp Hahn

2016-02-10 08:29:44 CET

r67289 | Bug #40575 ldap: Kill OpenLDAP slapd during upgrade
 Add missing slapd stop

Comment 4 Stefan Gohmann

2016-02-11 07:04:13 CET

I'll move it to 4.1-1-errata. The package haven't been built and a YAML doesn't exist so we won't get it into the current errata updates.

I've reverted the patch: r67336

Comment 5 Philipp Hahn

2016-02-17 15:44:52 CET

r67514 | Bug #40575 ldap: Kill OpenLDAP slapd during upgrade

Package: univention-ldap
Version: 12.1.6-22.812.201602171541
Branch: ucs_4.1-0
Scope: errata4.1-1

r67516 | Bug #40575 ldap: Kill OpenLDAP slapd during upgrade YAML
 univention-ldap.yaml

Comment 6 Stefan Gohmann

2016-02-23 11:45:17 CET

Code review: OK

YAML: OK (it will be released for UCS 4.1-0 and 4.1-1 which is OK)

Tests: OK

Comment 7 Janek Walkenhorst

2016-02-24 13:05:53 CET

<http://errata.software-univention.de/ucs/4.1/119.html>

Comment 8 Philipp Hahn

2016-04-26 09:48:07 CEST

*** Bug 40886 has been marked as a duplicate of this bug. ***