Bug 48673

Summary: Update to 4.3 Errata 428 breaks Schema extension
Product: UCS Reporter: Arvid Requate <requate>
Component: Notifier (univention-directory-notifier)Assignee: UCS maintainers <ucs-maintainers>
Status: CLOSED INVALID QA Contact: UCS maintainers <ucs-maintainers>
Severity: major    
Priority: P5 CC: damrose, hahn, heidelberger, schwardt
Version: UCS 4.3   
Target Milestone: UCS 4.3-3-errata   
Hardware: Other   
OS: Linux   
URL: https://help.univention.com/t/durch-paketupdate-ldap-kaputt/11218
What kind of report is it?: Bug Report What type of bug is this?: 1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?: 2: Will only affect a few installed domains How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.011 Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score: 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H)
Bug Depends on: 48427    
Bug Blocks:    

Description Arvid Requate univentionstaff 2019-02-13 23:38:14 CET 
Report in forum, see URL field above:

Stopping slapd (via systemctl): slapd.service.
2019-02-13 22:31:10.683697302+01:00 (in joinscript_init)
Module: kopano-cfg
Multifile: /etc/ldap/slapd.conf
CRITICAL:main:Error in OpenLDAP configuration:
5c648cae /etc/ldap/slapd.conf: line 206: rootdn is always granted unlimited privileges.
5c648cae WARNING: No dynamic config support for overlay translog.
5c648cae WARNING: No dynamic config support for overlay shadowbind.
5c648cae mdb_db_open: database “cn=translog” cannot be opened: No such file or directory (2). Restore from backup!
5c648cae backend_startup_one (type=mdb, suffix=“cn=translog”): bi_db_open failed! (2)
slap_startup failed (test would succeed using the -u switch)
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2019-02-14 09:07:45 CET 
According to the forum, the broken LDAP also existed before the erratum has been installed.
Comment 2 Arvid Requate univentionstaff 2019-02-14 11:41:00 CET 
Ok this error message is not nice and we should find a way to avoid it, because it's a red herring leading people into the wrong direction. In the given case the cause of the problem (cannot log into Kopano, deinstallation of packages) was a completely diffferent one:

https://help.univention.com/t/durch-paketupdate-ldap-kaputt/11218/7
Comment 3 Arvid Requate univentionstaff 2019-02-14 13:06:21 CET 
As discussed, not a bug in UCS.