Univention Bugzilla – Bug 48752
S4-Connector sync to ucs: reject for CN=PSPs and CN=Managed Service Accounts
Last modified: 2020-07-16 16:05:15 CEST
With the new Samba version of UCS 4.4 there are two new rejects on UCS@school Slave PDCs, if the Master doesn't have Samba/AD installed: oot@s44adm:~# univention-s4connector-list-rejected UCS rejected S4 rejected 1: S4 DN: CN=dns,DC=uni,DC=dtr UCS DN: cn=dns,dc=uni,dc=dtr 2: S4 DN: CN=Managed Service Accounts,DC=uni,DC=dtr UCS DN: <not found> 3: S4 DN: CN=PSPs,CN=System,DC=uni,DC=dtr UCS DN: <not found> The first one is Bug #46649, but the other two containers are new,
I have these rejects in my testenvironment too, and I have samba4 installed on my master.
Created attachment 10123 [details] debug4 in my testenvironment for PSPs
The containers "Managed Service Accounts" and "PSPs" are now created before provisioning samba. The s4-connector on slaves will then not try (and fail) to create the containers anymore. [4.4] c2b04666e Bug #48752: create containers "Managed Service Accounts" and "PSPs" before provisioning samba [4.4] 969050b7f Bug #48752: advisory ucs-school-metapackage (12.0.2-5) Should then not fail anymore in test 00_checks/01_univention_system_check on slave in "Install U@S 4.4 Multiserver (00_checks_only)": http://jenkins.knut.univention.de:8080/job/UCSschool-4.4/job/Install%20Multiserver%2000_checks_only/231/Config=s4,StartConfig=no-samba,TestGroup=base1/testReport/junit/00_checks/01_univention_system_check/slave2151/
OK - the problem with CN=Managed Service Accounts and CN=PSPs is gone. The errors in "00_checks/01_univention_system_check" in http://jenkins.knut.univention.de:8080/job/UCSschool-4.4/job/Install%20Multiserver%2000_checks_only/lastBuild/#showFailuresLink are not related.
OK - ucs-school-metapackage OK - yaml
UCS@school 4.4 v4 has been released. https://docs.software-univention.de/changelog-ucsschool-4.4v4-de.html If this error occurs again, please clone this bug.