92univention-management-console-web-server.inst Join fail

HS-Systeme · August 13, 2023, 9:52pm

Hi I have a ucs server as domain control and a second server as UCS with Kopano. At the weekend the SSL server certificate expired, I renewed it and after that I was no longer able to join the second server to the domain. The two scripts cannot be executed.

70kopano4ucs-udm.inst
92univention-management-console-web-server.inst

When renewing the certificates, however, I was not able to renew this certificate.
ucs-sso.virea.intranet

I tried following this guide

eval "$(ucr shell domainname)"
install -o root -g samlcgi -m 0644 /etc/univention/ssl/"ucs-sso.${domainname}"/cert.pem /etc/simplesamlphp/"ucs-sso.${domainname}-idp-certificate.crt"
install -o root -g samlcgi -m 0640 /etc/univention/ssl/"ucs-sso.${domainname}"/private.key /etc/simplesamlphp/"ucs-sso.${domainname}-idp-certificate.key"
service univention-saml restart

where should i put my domain name virea.intranet there?

I would be thankfull for your help

HS-Systeme · August 13, 2023, 9:58pm

here the join.log

2023-08-13 23:55:40.994201997+02:00 (in joinscript_save_current_version)
EXITCODE=0
RUNNING 92univention-fetchmail-schema.inst
2023-08-13 23:55:41.054027063+02:00 (in joinscript_init)
Object exists: cn=ldapschema,cn=univention,dc=virea,dc=intranet
Object exists: cn=ldapacl,cn=univention,dc=virea,dc=intranet
INFO: No change of core data of object univention-fetchmail.
INFO: No change of core data of object 58univention-fetchmail-schema.
No modification: cn=univention-fetchmail,cn=ldapschema,cn=univention,dc=virea,dc=intranet

No modification: cn=58univention-fetchmail-schema,cn=ldapacl,cn=univention,dc=virea,dc=intranet

Waiting for activation of the extension object univention-fetchmail: OK
Waiting for activation of the extension object 58univention-fetchmail-schema: OK
Object exists: cn=udm_syntax,cn=univention,dc=virea,dc=intranet
INFO: No change of core data of object fetchmail.
Object modified: cn=fetchmail,cn=udm_syntax,cn=univention,dc=virea,dc=intranet

Waiting for activation of the extension object fetchmail: OK
Waiting for file /usr/lib/python3/dist-packages/univention/admin/syntax.d/fetchmail.py: OK
Object exists: cn=udm_hook,cn=univention,dc=virea,dc=intranet
INFO: No change of core data of object fetchmail.
No modification: cn=fetchmail,cn=udm_hook,cn=univention,dc=virea,dc=intranet

Waiting for activation of the extension object fetchmail: OK
Waiting for file /usr/lib/python3/dist-packages/univention/admin/hooks.d/fetchmail.py: OK
Object exists: cn=mail,cn=custom attributes,cn=univention,dc=virea,dc=intranet
Object exists: cn=FetchmailConfigSingle,cn=mail,cn=custom attributes,cn=univention,dc=virea,dc=intranet
Create extended attribute univentionFetchmailSingle univentionFetchmailMulti
Object exists: cn=FetchmailConfigMulti,cn=mail,cn=custom attributes,cn=univention,dc=virea,dc=intranet
2023-08-13 23:55:48.836814491+02:00 (in joinscript_save_current_version)
EXITCODE=0
RUNNING 92univention-management-console-web-server.inst
2023-08-13 23:55:49.081109571+02:00 (in joinscript_init)
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/icon’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/link’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/link/de’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/priority’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/label’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/label/de’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/description’ does not exist
W: The config registry variable ‘ucs/web/overview/entries/admin/umc/description/de’ does not exist
Object exists: SAMLServiceProviderIdentifier=https://ucs-Mail.virea.intranet/univention/saml/metadata,cn=saml-serviceprovider,cn=univention,dc=virea,dc=intranet
Object modified: SAMLServiceProviderIdentifier=https://ucs-Mail.virea.intranet/univention/saml/metadata,cn=saml-serviceprovider,cn=univention,dc=virea,dc=intranet
Not updating ucs/server/sso/fqdn
rm: das Entfernen von ‘/usr/share/univention-management-console/saml/idp/*.xml’ ist nicht mÃ¶glich: Datei oder Verzeichnis nicht gefunden
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed

0 0 0 0 0 0 0 0 --:–:-- --:–:-- --:–:-- 0
0 0 0 0 0 0 0 0 --:–:-- --:–:-- --:–:-- 0
curl: (22) The requested URL returned error: 404 Not Found
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed

0 0 0 0 0 0 0 0 --:–:-- --:–:-- --:–:-- 0
0 0 0 0 0 0 0 0 --:–:-- --:–:-- --:–:-- 0
curl: (22) The requested URL returned error: 404 Not Found
E: your request could not be fulfilled
try univention-config-registry --help for more information
Create umc/saml/idp-server
Module: setup_saml_sp
Try to download idp metadata Unsetting umc/saml/idp-server
Module: kopano-cfg
Module: setup_saml_sp
umc/saml/idp-server not set, nothing to do
EXITCODE=3
660f3933-3eb3-4669-b494-d837e9303fbd
RUNNING 98univention-pkgdb-tools.inst
2023-08-13 23:56:53.960596912+02:00 (in joinscript_init)
Cannot find service-record of _pkgdb._tcp.
No DB-Server-Name found.
2023-08-13 23:56:54.120561541+02:00 (in joinscript_save_current_version)
EXITCODE=0
RUNNING 99kopano4ucs-safemode-off.inst
2023-08-13 23:56:54.151216419+02:00 (in joinscript_init)
Setting kopano/cfg/server/user_safe_mode
Module: kopano-cfg
Unsetting kopano/cfg/server/user_safe_mode
Module: kopano-cfg
Waiting for kopano-server startup
2023-08-13 23:56:54.580294530+02:00 (in joinscript_save_current_version)
EXITCODE=0
univention-join-hooks: looking for hook type “join/post-joinscripts” on ucs01.virea.intranet
Found hooks:

So 13. Aug 23:56:55 CEST 2023
univention-run-join-scripts finished