Bug 42425 - ssh-login for ${DCACCOUNT}@${DCNAME} failed. Maybe you entered a wrong password.
ssh-login for ${DCACCOUNT}@${DCNAME} failed. Maybe you entered a wrong password.
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Join (univention-join)
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.2-1-errata
Assigned To: Felix Botner
Arvid Requate
:
Depends on:
Blocks: 45514
  Show dependency treegraph
 
Reported: 2016-09-16 10:15 CEST by Florian Best
Modified: 2017-10-12 20:07 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.309
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2016102721000059, 2016112421000535, 2016112821000359, 2016120921000115, 2017041121000839, 2017041721000417, 2017022721000652, 2017050121000034, 2017051521000099, 2017052621000103, 2017062121000512, 2017062621001084, 2017062621001173, 2017071021000201
Bug group (optional): Error handling, External feedback
Max CVSS v3 score:


Attachments
bug42425-qa.patch (1.69 KB, patch)
2017-08-28 21:25 CEST, Arvid Requate
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2016-09-16 10:15:21 CEST
Version: 4.1-3 errata268 (Vahr)

We received the following feedback:
Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for Administrator@ac001c01.deac.****** failed. Maybe you entered a wrong password.

We should check this prior to starting the setup wizard.
Comment 1 Florian Best univentionstaff 2016-10-28 12:12:51 CEST
Reported again, 4.1-3 errata318 (Vahr)
Comment 2 Florian Best univentionstaff 2016-12-09 17:19:40 CET
Version: 4.1-4 errata332 (Vahr)

Remark: Attempting to deploy new UCS server to existing AD domain failed

Domain setup (this might take a while): ssh-login for Administrator@ad2.*****.local failed. Maybe you entered a wrong password.
Comment 3 Florian Best univentionstaff 2016-12-09 17:21:33 CET
Version: 4.1-4 errata332 (Vahr)

Remark: Fehler tritt bei DHCP und bei statischer IP auf.
Server ist definitiv erreichbar (Win 2012, AD 2012).
AD-Anmeldekonto ist Dom-Admin, Kennwort ist korrekt.

Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for ******@ss2-dc4.*********.de failed. Maybe you entered a wrong password.
Comment 4 Florian Best univentionstaff 2016-12-09 17:30:26 CET
Reported again, 4.1-4 errata353 (Vahr)

Remark: normale installation als dc slave auf VMware-vorlage "anderes Linux 64bit"; keine auswahl von AD Paketen möglich, dann SSH login versuch mit meinem AD-Account
(Administrator) ???

Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for *******@ucs.******.local failed. Maybe you entered a wrong password.
Comment 5 Florian Best univentionstaff 2017-04-18 11:57:06 CEST
Version: 4.2-0 errata0 (Lesum)
Comment 6 Florian Best univentionstaff 2017-04-18 11:58:24 CEST
Version: 4.2-0 errata1 (Lesum)
Comment 7 Florian Best univentionstaff 2017-04-21 11:46:43 CEST
Version: 4.1-4 errata404 (Vahr)
Comment 9 Florian Best univentionstaff 2017-05-05 15:25:42 CEST
The reporter did the installation + report twice, therefore I increase the user pain.
Comment 10 Florian Best univentionstaff 2017-05-16 13:05:26 CEST
Version: 4.2-0 errata15 (Lesum)
Comment 11 Florian Best univentionstaff 2017-05-30 10:48:26 CEST
Reported again, 4.2-0 errata25 (Lesum)
Comment 12 Florian Best univentionstaff 2017-06-23 17:23:44 CEST
Reported again, 4.1-4 errata429 (Vahr)
Comment 13 Florian Best univentionstaff 2017-06-27 10:12:40 CEST
Reported again, 4.2-1 errata52 (Lesum)
Comment 14 Florian Best univentionstaff 2017-06-27 10:13:26 CEST
Reported again, 4.2-1 errata52 (Lesum)
Comment 15 Stefan Gohmann univentionstaff 2017-06-28 06:50:15 CEST
Mark all bugs with a user pain > 0.3 as errata bugs.
Comment 16 Florian Best univentionstaff 2017-07-14 13:58:52 CEST
Reported again, 4.2-1 errata52 (Lesum)
Comment 17 Florian Best univentionstaff 2017-08-15 09:09:27 CEST
Reported again, 4.2-1 errata131 (Lesum)
#2017081021000182
Comment 18 Felix Botner univentionstaff 2017-08-23 14:04:58 CEST
(In reply to Florian Best from comment #0)
> Version: 4.1-3 errata268 (Vahr)
> 
> We received the following feedback:
> Domäneneinrichtung (Dies kann einige Zeit dauern): ssh-login for
> Administrator@ac001c01.deac.****** failed. Maybe you entered a wrong
> password.
> 
> We should check this prior to starting the setup wizard.

ApplianceWizard.js already checks this. 

univention-join now prints the univention-ssh output in case the connections fails and some more info ...


**************************************************************************
* Join failed!                                                           *
* Contact your system administrator                                      *
**************************************************************************
* Message:  The ssh-login to Administrator@master.w2k12.test failed with "Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive).". Please make sure the account Administrator is a member of the Domain Admins group!
**************************************************************************

i don't know what else to do here

univention-join r82429 errata4.2-1
Comment 19 Florian Best univentionstaff 2017-08-24 13:38:57 CEST
Version: 4.2-1 errata52 (Lesum)

Remark: Hallo.
Evtl. können Sie mir hierzu Hilfestellung geben. Das Passwort ist definitiv richtig.

2017082421000512
Comment 20 Arvid Requate univentionstaff 2017-08-28 21:25:07 CEST
Created attachment 9149 [details]
bug42425-qa.patch

sed doesn't deal with multiline that way, maybe just use bash variable operations as shown in the attached patch. Quoting is not required for 'foo=$(cmd)' and the more readable without.
Comment 21 Felix Botner univentionstaff 2017-08-29 16:12:07 CEST
(In reply to Arvid Requate from comment #20)
> Created attachment 9149 [details]
> bug42425-qa.patch
> 
> sed doesn't deal with multiline that way, maybe just use bash variable
> operations as shown in the attached patch. Quoting is not required for
> 'foo=$(cmd)' and the more readable without.

-> ping_out="$(ping -q -c 3 "10.200.7.88" 2>&1)"
-> echo "$ping_out" 
PING 10.200.7.88 (10.200.7.88) 56(84) bytes of data.

--- 10.200.7.88 ping statistics ---
3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2053ms
pipe 3

-> ping_out="$(echo $ping_out | sed -e 's/[\r\n]//g')"
-> echo "$ping_out"
PING 10.200.7.88 (10.200.7.88) 56(84) bytes of data. --- 10.200.7.88 ping statistics --- 3 packets transmitted, 0 received, +3 errors, 100% packet loss, time 2053ms pipe 3
Comment 22 Felix Botner univentionstaff 2017-08-29 16:37:14 CEST
(In reply to Arvid Requate from comment #20)
> Created attachment 9149 [details]
> bug42425-qa.patch
> 
> sed doesn't deal with multiline that way, maybe just use bash variable
> operations as shown in the attached patch. Quoting is not required for
> 'foo=$(cmd)' and the more readable without.

yep, your are right, the echo $ping_out removed the newlines, not sed

changed now to echo "$.._out" | tr '\n' ' ' | tr '\r' ' '

univention-join r82520
errata4.2-1
Comment 23 Arvid Requate univentionstaff 2017-08-29 18:35:18 CEST
Ok, my patch suggested to fix the sed expression in

 cat /etc/resolv.conf | sed -ne 's/nameserver //p'

too: the sed not anchored and and it expects resolv.conf to have a single space training "nameserver" for all future times and not a tab.

Btw: tr '\n\r' ' ' should also work according to the manpage.

Works:

Without DNS:

**************************************************************************
* Message:  The UCS master server's name "foobar.ar41i1.qa" is unknown to the DNS servers (dns servers:  10.200.8.11 10.200.8.10, nslookup: Server:             10.200.8.11 Address:   10.200.8.11#53  ** server can't find foobar.ar41i1.qa: NXDOMAIN ).
**************************************************************************

and without network:

**************************************************************************
* Message:  The UCS master server "master10.ar41i1.qa" is not reachable, ping failed (ping ipv4: PING master10.ar41i1.qa (10.200.8.10) 56(84) bytes of data.  --- master10.ar41i1.qa ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2046ms , ping ipv6: unknown host ).
**************************************************************************
Comment 24 Arvid Requate univentionstaff 2017-08-30 16:29:37 CEST
<http://errata.software-univention.de/ucs/4.2/149.html>