After IP Change SAML wont work

UCS - Univention Corporate Server
#1

Hi,

i changes the IP of all my Univention Servers.

After i changed the IP Adresses, i get this Message:
Zerifikat https://10.1.0.4/simplesamlphp/saml2/idp/certificate konnte nicht geladen werden: HTTPSConnectionPool(host=‘10.1.0.4’, port=443): Max retries exceeded with url: /simplesamlphp/saml2/idp/certificate (Caused by NewConnectionError(’: Failed to establish a new connection: [Errno 113] Keine Route zum Zielrechner’)) Führen Sie das Join-Skript 92univention-management-console-web-server via [Modul “Domänenbeitritt”](javascript:void(0)) oder univention-run-join-scripts --force --run-scripts 92univention-management-console-web-server auf der Befehlszeile as Benutzer root aus.

10.1.0.4 is an old IP Address of my Backup DC. Now it is 10.0.0.22.

I already tried the Domain Join and the CLI Command. Nothing helped. Any idea? I wont renew all certificates :confused:

Thanks

#2

Same problem here - my error message is pointing to 192.168.8.160, but has to be 192.168.120.87.
Any idea how the find and fix that old ip address?

What i found is an entry in the LDAP: univentionNewPortalEntryLink with the old IP
and also the file
/etc/simplesamlphp/metadata.d/https:__FQDN_univention_saml_metadata.php
contains the old IP. Changes to the IPs in that php-file are directly overwritten with the old IP.

I also don’t find any way to change univentionNewPortalEntryLink in the LDAP.

Best regards
Andre

Mastodon