Univention Bugzilla – Full Text Bug Listing |
Summary: | ssh-login for ${DCACCOUNT}@${DCNAME} failed. Maybe you entered a wrong password. | ||
---|---|---|---|
Product: | UCS | Reporter: | Florian Best <best> |
Component: | Join (univention-join) | Assignee: | Felix Botner <botner> |
Status: | CLOSED FIXED | QA Contact: | Arvid Requate <requate> |
Severity: | normal | ||
Priority: | P5 | CC: | gohmann |
Version: | UCS 4.2 | ||
Target Milestone: | UCS 4.2-1-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
See Also: |
https://forge.univention.org/bugzilla/show_bug.cgi?id=42020 https://forge.univention.org/bugzilla/show_bug.cgi?id=43006 |
||
What kind of report is it?: | Bug Report | What type of bug is this?: | 6: Setup Problem: Issue for the setup process |
Who will be affected by this bug?: | 3: Will affect average number of installed domains | How will those affected feel about the bug?: | 3: A User would likely not purchase the product |
User Pain: | 0.309 | Enterprise Customer affected?: | Yes |
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | 2016102721000059, 2016112421000535, 2016112821000359, 2016120921000115, 2017041121000839, 2017041721000417, 2017022721000652, 2017050121000034, 2017051521000099, 2017052621000103, 2017062121000512, 2017062621001084, 2017062621001173, 2017071021000201 | Bug group (optional): | Error handling, External feedback |
Max CVSS v3 score: | |||
Bug Depends on: | |||
Bug Blocks: | 45514 | ||
Attachments: | bug42425-qa.patch |
Description
Florian Best
2016-09-16 10:15:21 CEST
Reported again, 4.1-3 errata318 (Vahr) Version: 4.1-4 errata332 (Vahr) Remark: Attempting to deploy new UCS server to existing AD domain failed Domain setup (this might take a while): ssh-login for Administrator@ad2.*****.local failed. Maybe you entered a wrong password. Version: 4.1-4 errata332 (Vahr) Remark: Fehler tritt bei DHCP und bei statischer IP auf. Server ist definitiv erreichbar (Win 2012, AD 2012). AD-Anmeldekonto ist Dom-Admin, Kennwort ist korrekt. Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for ******@ss2-dc4.*********.de failed. Maybe you entered a wrong password. Reported again, 4.1-4 errata353 (Vahr) Remark: normale installation als dc slave auf VMware-vorlage "anderes Linux 64bit"; keine auswahl von AD Paketen möglich, dann SSH login versuch mit meinem AD-Account (Administrator) ??? Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for *******@ucs.******.local failed. Maybe you entered a wrong password. Version: 4.2-0 errata0 (Lesum) Version: 4.2-0 errata1 (Lesum) Version: 4.1-4 errata404 (Vahr) The reporter did the installation + report twice, therefore I increase the user pain. Version: 4.2-0 errata15 (Lesum) Reported again, 4.2-0 errata25 (Lesum) Reported again, 4.1-4 errata429 (Vahr) Reported again, 4.2-1 errata52 (Lesum) Reported again, 4.2-1 errata52 (Lesum) Mark all bugs with a user pain > 0.3 as errata bugs. Reported again, 4.2-1 errata52 (Lesum) Reported again, 4.2-1 errata131 (Lesum) #2017081021000182 (In reply to Florian Best from comment #0) > Version: 4.1-3 errata268 (Vahr) > > We received the following feedback: > Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for > Administrator@ac001c01.deac.****** failed. Maybe you entered a wrong > password. > > We should check this prior to starting the setup wizard. ApplianceWizard.js already checks this. univention-join now prints the univention-ssh output in case the connections fails and some more info ... ************************************************************************** * Join failed! * * Contact your system administrator * ************************************************************************** * Message: The ssh-login to Administrator@master.w2k12.test failed with "Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive).". Please make sure the account Administrator is a member of the Domain Admins group! ************************************************************************** i don't know what else to do here univention-join r82429 errata4.2-1 Version: 4.2-1 errata52 (Lesum) Remark: Hallo. Evtl. können Sie mir hierzu Hilfestellung geben. Das Passwort ist definitiv richtig. 2017082421000512 Created attachment 9149 [details] bug42425-qa.patch sed doesn't deal with multiline that way, maybe just use bash variable operations as shown in the attached patch. Quoting is not required for 'foo=$(cmd)' and the more readable without. (In reply to Arvid Requate from comment #20) > Created attachment 9149 [details] > bug42425-qa.patch > > sed doesn't deal with multiline that way, maybe just use bash variable > operations as shown in the attached patch. Quoting is not required for > 'foo=$(cmd)' and the more readable without. -> ping_out="$(ping -q -c 3 "10.200.7.88" 2>&1)" -> echo "$ping_out" PING 10.200.7.88 (10.200.7.88) 56(84) bytes of data. --- 10.200.7.88 ping statistics --- 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2053ms pipe 3 -> ping_out="$(echo $ping_out | sed -e 's/[\r\n]//g')" -> echo "$ping_out" PING 10.200.7.88 (10.200.7.88) 56(84) bytes of data. --- 10.200.7.88 ping statistics --- 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2053ms pipe 3 (In reply to Arvid Requate from comment #20) > Created attachment 9149 [details] > bug42425-qa.patch > > sed doesn't deal with multiline that way, maybe just use bash variable > operations as shown in the attached patch. Quoting is not required for > 'foo=$(cmd)' and the more readable without. yep, your are right, the echo $ping_out removed the newlines, not sed changed now to echo "$.._out" | tr '\n' ' ' | tr '\r' ' ' univention-join r82520 errata4.2-1 Ok, my patch suggested to fix the sed expression in cat /etc/resolv.conf | sed -ne 's/nameserver //p' too: the sed not anchored and and it expects resolv.conf to have a single space training "nameserver" for all future times and not a tab. Btw: tr '\n\r' ' ' should also work according to the manpage. Works: Without DNS: ************************************************************************** * Message: The UCS master server's name "foobar.ar41i1.qa" is unknown to the DNS servers (dns servers: 10.200.8.11 10.200.8.10, nslookup: Server: 10.200.8.11 Address: 10.200.8.11#53 ** server can't find foobar.ar41i1.qa: NXDOMAIN ). ************************************************************************** and without network: ************************************************************************** * Message: The UCS master server "master10.ar41i1.qa" is not reachable, ping failed (ping ipv4: PING master10.ar41i1.qa (10.200.8.10) 56(84) bytes of data. --- master10.ar41i1.qa ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2046ms , ping ipv6: unknown host ). ************************************************************************** |