After upgrade to 4.3 join script fails

version/erratalevel: 87
version/patchlevel: 0
version/version: 4.3

After the upgrade to 4.3 the join script 91univention-saml.inst cannot be run succesfully. Here is the output of univention-run-join-scripts

univention-run-join-scripts started
Mi 23. Mai 15:14:20 CEST 2018

RUNNING 91univention-saml.inst
2018-05-23 15:14:20.583349254+02:00 (in joinscript_init)
Not updating saml/idp/certificate/privatekey
Not updating saml/idp/certificate/certificate
Not updating saml/idp/entityID
Not updating ucs/server/sso/fqdn
File: /etc/apache2/sites-available/univention-saml.conf
Adding A record "ucs-sso 192.168.178.189" to zone airwerk.local...
done
23.05.18 15:14:21.972  DEBUG_INIT
E: Insufficient information: The following properties are missing:
primaryGroup
EXITCODE=3

Mi 23. Mai 15:14:22 CEST 2018
univention-run-join-scripts finished

Also nslookup ucs-sso shows no good result

Server:		192.168.178.10
Address:	192.168.178.10#53

** server can't find ucs-sso: SERVFAIL

The output of univention-pkgdb-scan is

Cannot find service-record of _pkgdb._tcp.
No DB-Server-Name found

The service-record does exist, postgresql 9.4 has been installed before the upgrade to 4.3 ,considering https://help.univention.com/t/updating-from-postgresql-9-1-to-postgresql-9-4/8073
and
https://help.univention.com/t/postgresql-fehler-bei-upgrade-von-4-2-4-3/8650

I have no idea how to go on, if someone has a clue, it will be highly appreciated!

Also

smbclient -UAdministrator //$(ucr get hostname)/sysvol -c quit

shows no success

Enter AIRWERK\Administrator's password: 
tree connect failed: NT_STATUS_BAD_NETWORK_NAME

LDAP connection is fine

univention-ldapsearch -s base -LLL dn
dn: dc=airwerk,dc=local

Can you edit the joinscript in /usr/lib/univention-install/91univention-saml.inst and add one line to create more debug output? Right below eval "$(ucr shell)" add a new line with set -x.
Then, execute the joinscript again with univention-run-join-scripts and paste the output from /var/log/univention/join.log

Thanks for your reply!
Since I’m a new user I cannot attach files - Here are the last approx 500 lines of/var/log/univention/join.log after having edited 91univention-saml.inst


++ sshd_xdisplayoffset=
++ sshd_xforwarding=no
++ sshd_xuselocalhost=
++ ssl_ca_cipher=aes256
++ ssl_common='Univention Corporate Server Root CA (ID=SfPHwpLc)'
++ ssl_country=US
++ ssl_crl_interval=7
++ ssl_crl_validity=10
++ ssl_default_bits=2048
++ ssl_default_days=1825
++ ssl_default_hashfunction=sha256
++ ssl_email=ssl@airwerk.local
++ ssl_host_extensions=
++ ssl_host_objectclass=univentionDomainController,univentionMemberServer,univentionClient,univentionMobileClient,univentionCorporateClient
++ ssl_locality=DE
++ ssl_organization=DE
++ ssl_organizationalunit='Univention Corporate Server'
++ ssl_state=DE
++ ssl_update_expired=yes
++ ssl_validity_check=yes
++ ssl_validity_host=18886
++ ssl_validity_root=18886
++ ssl_validity_warning=30
++ stunnel_debuglevel=
++ syslog_auth=
++ syslog_cron=
++ syslog_daemon=
++ syslog_debug_selector=
++ syslog_debug=
++ syslog_input_relp=
++ syslog_input_tcp=
++ syslog_input_udp=
++ syslog_kern=
++ syslog_limit_burst=
++ syslog_limit_interval=
++ syslog_lpr=
++ syslog_mail_mirrorto_syslog=no
++ syslog_mail=
++ syslog_maxmessagesize=
++ syslog_messages_selector=
++ syslog_messages=
++ syslog_news=
++ syslog_remote_fallback=
++ syslog_remote_selector=
++ syslog_remote=
++ syslog_syslog_avoid_duplicate_messages=
++ syslog_syslog_selector=
++ syslog_syslog=
++ syslog_template_default=
++ syslog_user=
++ syslog_xconsole_selector=
++ syslog_xconsole=
++ system_setup_boot_fields_blacklist=
++ system_setup_boot_help=
++ system_setup_boot_minimal_memory=
++ system_setup_boot_nssldaptimeout=30
++ system_setup_boot_pages_blacklist=
++ system_setup_boot_select_role=true
++ system_setup_boot_start=false
++ system_setup_packages_blacklist=
++ system_setup_packages_whitelist=
++ system_setup_showloginmessage=false
++ system_stats_cron='0,30 * * * *'
++ system_stats=yes
++ systemd_journald_MaxFileSec='1 day'
++ systemd_journald_MaxRetentionSec='12 week'
++ systemd_journald_SplitMode=
++ systemd_journald_Storage=persistent
++ systemd_journald_SystemKeepFree=
++ systemd_journald_SystemMaxFileSize=100M
++ systemd_journald_SystemMaxUse=
++ timeserver2=
++ timeserver3=
++ timeserver=192.168.178.10
++ ucr_backup_enabled=yes
++ ucr_encoding_strict=true
++ ucr_output_brief=
++ ucr_replog_enabled=yes
++ ucs_server_languages_de_AT='Deutsch (Österreich)'
++ ucs_server_languages_de_CH='Deutsch (Schweiz)'
++ ucs_server_languages_de_DE=Deutsch
++ ucs_server_languages_en_GB='English (United Kingdom)'
++ ucs_server_languages_en_US=English
++ ucs_server_robots_allow=
++ ucs_server_robots_disallow=/
++ ucs_server_saml_idp_server_ucs_airwerk_airwerk_local=ucs-airwerk.airwerk.local
++ ucs_server_sso_autoregistraton=
++ ucs_server_sso_certificate_download=
++ ucs_server_sso_certificate_generation=
++ ucs_server_sso_fqdn=ucs-sso.airwerk.local
++ ucs_server_sso_virtualhost=true
++ ucs_web_overview_entries_admin_nagios_description_de='Netzwerk-, Host- und Serviceüberwachung'
++ ucs_web_overview_entries_admin_nagios_description='Network, host and service monitoring system'
++ ucs_web_overview_entries_admin_nagios_label_de='Univention Nagios'
++ ucs_web_overview_entries_admin_nagios_label='Univention Nagios'
++ ucs_web_overview_entries_admin_nagios_link=/nagios/
++ ucs_web_overview_entries_admin_nagios_priority=50
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description_de='Zentrale Portal-Webseite für die UCS-Domäne'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description_fr='Page web du portail central du domaine UCS'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description='Central portal web page for the UCS domain'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_icon=/univention/portal/portal-logo.svg
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label_de='Univention Portal'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label_fr='Portail Univention'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label='Univention Portal'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_link=/univention/portal/
++ umask=
++ umc_http_autostart=yes
++ umc_http_content_security_policy_connect_src=''\''self'\'''
++ umc_http_content_security_policy_default_src=''\''unsafe-eval'\'''
++ umc_http_content_security_policy_font_src=''\''self'\'''
++ umc_http_content_security_policy_form_action=''\''self'\'''
++ umc_http_content_security_policy_frame_ancestors=''\''self'\'''
++ umc_http_content_security_policy_frame_src='*'
++ umc_http_content_security_policy_img_src='*'
++ umc_http_content_security_policy_media_src='*'
++ umc_http_content_security_policy_object_src=''\''self'\'''
++ umc_http_content_security_policy_script_src=''\''self'\'' '\''unsafe-inline'\'' '\''unsafe-eval'\'' https://www.youtube.com/ https://s.ytimg.com/'
++ umc_http_content_security_policy_style_src=''\''self'\'' '\''unsafe-inline'\'''
++ umc_http_interface=127.0.0.1
++ umc_http_max_request_body_size=
++ umc_http_maxthreads=
++ umc_http_port=8090
++ umc_http_requestqueuesize=
++ umc_http_response_timeout=310
++ umc_http_session_timeout=28800
++ umc_http_show_tracebacks=
++ umc_logout_location=
++ umc_module_debug_level=2
++ umc_module_setup_wizard_disabled=true
++ umc_module_timeout=600
++ umc_module_udm_users_self_disabled=true
++ umc_saml_grace_time=
++ umc_saml_idp_server=https://ucs-sso.airwerk.local/simplesamlphp/saml2/idp/metadata.php
++ umc_saml_sp_server=
++ umc_saml_trusted_sp_ucs_airwerk_airwerk_local=ucs-airwerk.airwerk.local
++ umc_self_service_passwordreset_blacklist_groups='Administrators,Domain Admins'
++ umc_self_service_passwordreset_blacklist_users=
++ umc_self_service_passwordreset_email_enabled=yes
++ umc_self_service_passwordreset_email_sender_address='Password Reset Service <noreply@ucs-airwerk.airwerk.local>'
++ umc_self_service_passwordreset_email_server=localhost
++ umc_self_service_passwordreset_email_text_file=
++ umc_self_service_passwordreset_email_token_length=
++ umc_self_service_passwordreset_email_webserver_address=ucs-airwerk.airwerk.local
++ umc_self_service_passwordreset_enabled=yes
++ umc_self_service_passwordreset_external_command=
++ umc_self_service_passwordreset_external_enabled=no
++ umc_self_service_passwordreset_external_method=
++ umc_self_service_passwordreset_external_method_label=
++ umc_self_service_passwordreset_external_token_length=
++ umc_self_service_passwordreset_external_udm_property=
++ umc_self_service_passwordreset_limit_per_user_day=120
++ umc_self_service_passwordreset_limit_per_user_hour=60
++ umc_self_service_passwordreset_limit_per_user_minute=10
++ umc_self_service_passwordreset_limit_total_day=1000
++ umc_self_service_passwordreset_limit_total_hour=200
++ umc_self_service_passwordreset_limit_total_minute=120
++ umc_self_service_passwordreset_sms_command=
++ umc_self_service_passwordreset_sms_country_code=
++ umc_self_service_passwordreset_sms_enabled=no
++ umc_self_service_passwordreset_sms_password_file=
++ umc_self_service_passwordreset_sms_token_length=
++ umc_self_service_passwordreset_token_validity_period=
++ umc_self_service_passwordreset_whitelist_groups='Domain Users'
++ umc_self_service_passwordreset_whitelist_users=
++ umc_server_autostart=yes
++ umc_server_debug_level=2
++ umc_server_disable_security_restrictions=true
++ umc_server_ssl_ciphers=
++ umc_server_upload_max=2048
++ umc_server_upload_min_free_space=51200
++ umc_web_appliance_data_path=
++ umc_web_appliance_fast_setup_mode=true
++ umc_web_appliance_logo=
++ umc_web_appliance_name=
++ umc_web_favorites_default=udm:users/user,udm:groups/group,udm:computers/computer,appcenter:appcenter,updater
++ umc_web_feedback_description='[UMC-Feedback] Traceback'
++ umc_web_feedback_mail=feedback@univention.de
++ umc_web_hooks_univention_management_console_module_passwordchange=passwordchange
++ umc_web_hooks_univention_self_service=passwordreset
++ umc_web_hooks_univention_web_js=default_menu_entries
++ umc_web_host_referrallimit=
++ umc_web_piwik=
++ umc_web_sso_enabled=true
++ umc_web_sso_newwindow=true
++ umc_web_startupdialog=false
++ univention_x_defaultsession=KDE
++ update_available=no
++ update_check_boot_debug=no
++ update_check_boot_enabled=yes
++ update_check_cron_debug=no
++ update_check_cron_enabled=yes
++ update_check_cron_entry='5 * * * *'
++ update_commands_configure='dpkg --configure -a'
++ update_commands_distupgrade_simulate='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -us dist-upgrade'
++ update_commands_distupgrade='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u dist-upgrade'
++ update_commands_install_interactive='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir install'
++ update_commands_install='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 install'
++ update_commands_remove_interactive='apt-get remove'
++ update_commands_remove='apt-get --yes remove'
++ update_commands_show='apt-cache show'
++ update_commands_update='apt-get update'
++ update_commands_upgrade_simulate='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -us upgrade'
++ update_commands_upgrade='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u upgrade'
++ update_custom_postup=/var/lib/local-postup.sh
++ update_custom_preup=/var/lib/local-preup.sh
++ update_secure_apt=yes
++ update_umc_nextversion=true
++ update_umc_updateprocess_easy=
++ update_warning_coloured=no
++ update_warning_lang=default
++ update_warning_releasenotes=
++ update_warning_tty='/dev/tty1 /dev/tty2 /dev/tty3 /dev/tty4 /dev/tty5 /dev/tty6 /dev/tty7'
++ update_warning=no
++ updater_identify='UCS (VirtualBox)'
++ updater_statistics=U:0a,R:M
++ uuid_license=
++ uuid_system=9b9259fc-4c7d-4a5f-8a1e-83cd789b5d44
++ uvmm_check_interval=2
++ uvmm_check_timeout=10
++ uvmm_debug_command=INFO
++ uvmm_debug_ldap=WARNING
++ uvmm_debug_node=INFO
++ uvmm_debug_unix=WARNING
++ uvmm_debug=INFO
++ uvmm_novnc_autostart=
++ uvmm_pool_default_path=/var/lib/libvirt/images
++ uvmm_umc_autosearch=true
++ uvmm_umc_autoupdate_interval=5
++ version_erratalevel=87
++ version_patchlevel=0
++ version_releasename=Neustadt
++ version_version=4.3
++ welcome_screen_autostart=
++ windows_domain=AIRWERK
++ windows_wins_server=
++ windows_wins_support=no
++ xorg_autodetect_dri=
++ xorg_autodetect=no
++ xorg_device_BoardName=All
++ xorg_device_VendorName=All
++ xorg_device_driver=
++ xorg_display_primary=
++ xorg_display_relative_position=
++ xorg_display_secondary=
++ xorg_display_virtual=
++ xorg_keyboard_options_XkbLayout=de
++ xorg_keyboard_options_XkbModel=pc105
++ xorg_keyboard_options_XkbOptions=
++ xorg_keyboard_options_XkbVariant=
++ xorg_module_load='bitmap;ddc;dri;extmod;freetype;glx;int10;vbe;dbe;GLcore;xie;pex5;speedo;type1;record'
++ xorg_monitor_DisplaySize=
++ xorg_monitor_HorizSync=30-70
++ xorg_monitor_VertRefresh=50-90
++ xorg_mouse_psaux_Driver=mouse
++ xorg_mouse_psaux_Identifier='PS/2 Mouse'
++ xorg_mouse_psaux_disabled=true
++ xorg_mouse_psaux_options_Buttons=5
++ xorg_mouse_psaux_options_Emulate3Buttons=true
++ xorg_mouse_psaux_options_Emulate3Timeout=70
++ xorg_mouse_psaux_options_SendCoreEvents=true
++ xorg_mouse_psaux_options_ZAxisMapping='4 5'
++ xorg_mouse_psaux_options_device=/dev/psaux
++ xorg_mouse_psaux_options_protocol=auto
++ xorg_mouse_serial1_Driver=mouse
++ xorg_mouse_serial1_Identifier='Serial Mouse'
++ xorg_mouse_serial1_disabled=true
++ xorg_mouse_serial1_options_Emulate3Buttons=true
++ xorg_mouse_serial1_options_Emulate3Timeout=70
++ xorg_mouse_serial1_options_SendCoreEvents=true
++ xorg_mouse_serial1_options_device=/dev/ttyS0
++ xorg_mouse_serial1_options_protocol=auto
++ xorg_mouse_serial2_Driver=mouse
++ xorg_mouse_serial2_Identifier='Serial Mouse ttyS1'
++ xorg_mouse_serial2_disabled=true
++ xorg_mouse_serial2_options_Emulate3Buttons=true
++ xorg_mouse_serial2_options_Emulate3Timeout=70
++ xorg_mouse_serial2_options_SendCoreEvents=true
++ xorg_mouse_serial2_options_device=/dev/ttyS1
++ xorg_mouse_serial2_options_protocol=auto
++ xorg_mouse_usb_Driver=mouse
++ xorg_mouse_usb_Identifier='USB Mouse'
++ xorg_mouse_usb_options_Buttons=5
++ xorg_mouse_usb_options_SendCoreEvents=true
++ xorg_mouse_usb_options_ZAxisMapping='4 5'
++ xorg_mouse_usb_options_device=/dev/input/mice
++ xorg_mouse_usb_options_protocol=auto
++ xorg_resolution_secondary=
++ xorg_resolution=1024x768
++ xorg_screen_DefaultDepth=16
++ xorg_serverflags_options_AllowEmptyInput=false
++ xorg_serverflags_options_AllowMouseOpenFail=true
+ SECRETFILE=/etc/idp-ldap-user.secret
+ HOSTPWD=/etc/machine.secret
+ HOSTACCOUNT='ucs-airwerk$'
+ '[' domaincontroller_master = domaincontroller_master ']'
++ ucs_getAttrOfDN uid uid=sys-idp-user,cn=users,dc=airwerk,dc=local
+ username=sys-idp-user
+ '[' '!' sys-idp-user = sys-idp-user ']'
+ '[' '!' -e /etc/simplesamlphp/ucs-sso.airwerk.local-idp-certificate.crt ']'
+ ucr commit /etc/apache2/sites-available/univention-saml.conf
File: /etc/apache2/sites-available/univention-saml.conf
++ echo ucs-sso.airwerk.local
++ cut -d . -f 1
+ sso_hostname=ucs-sso
++ echo ucs-sso.airwerk.local
++ cut -d . -f 2-
+ sso_domainname=airwerk.local
+ '[' -z '' ']'
++ get_default_ip_address
++ PYTHONPATH=/usr/lib/pymodules/python2.7/univention/config_registry
++ python2.7 -c 'from interfaces import Interfaces;print Interfaces().get_default_ip_address().ip'
+ /usr/share/univention-directory-manager-tools/univention-dnsedit --ignore-exists airwerk.local add a ucs-sso 192.168.178.189
Adding A record "ucs-sso 192.168.178.189" to zone airwerk.local...
done
+ is_localhost_in_admember_mode
+ python -c '
import univention.lib.admember
import sys
univention.lib.admember.initialize_debug()
if univention.lib.admember.is_localhost_in_admember_mode():
        sys.exit(0)
else:
        sys.exit(1)
'
23.05.18 17:50:38.923  DEBUG_INIT
+ ucs_parseCredentials
+ '[' 0 -ge 1 ']'
+ '[' -n '' ']'
+ create_krb_apache2_user
+ '[' domaincontroller_master == domaincontroller_master ']'
++ create_machine_password
+++ /usr/sbin/univention-config-registry get machine/password/length
++ local length=
+++ /usr/sbin/univention-config-registry get machine/password/complexity
++ local compl=
++ '[' -z '' ']'
++ length=20
++ '[' -z '' ']'
++ compl=scn
++ pwgen -1 -scn 20
++ tr -d '\n'
+ spn_account_name_password=6zkU8Z3ssMPh773YSqTW
+ touch /etc/simplesamlphp/ucs-sso-kerberos.secret
+ chown root:root /etc/simplesamlphp/ucs-sso-kerberos.secret
+ chmod 600 /etc/simplesamlphp/ucs-sso-kerberos.secret
+ echo -n 6zkU8Z3ssMPh773YSqTW
+ udm users/user create --ignore_exists --position cn=users,dc=airwerk,dc=local --set username=ucs-sso --set lastname=SSO --set password=6zkU8Z3ssMPh773YSqTW --append objectFlag=hidden
E: Insufficient information: The following properties are missing:
primaryGroup
+ die
+ rc=3
+ joinscript_log_error
+ local line
+ echo -en ''
+ read line
+ exit 3
EXITCODE=3
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed

Mi 23. Mai 17:50:39 CEST 2018
univention-run-join-scripts finished

Hey,

when udm users/user create is called without specifying the primary group, the tool looks up the default primary group from a “default settings” object in the LDAP directory.

You should verify that the policy exist, that its primary group setting is not empty and that the group mentioned therein actually exists:

  1. Log in to the Univention Management Console
  2. Navigate to “Domain” → “LDAP directory”
  3. In the tree click on the “univention” node
  4. In the list on the right there should be an entry called default. Click on it.
  5. On the “Primary Groups” tab verify the “Default Primary Group” setting.

For our benefit, please post the output of the following command which lists the content of said object:

univention-ldapsearch -LLL -o ldif-wrap=no -b cn=default,cn=univention,$(ucr get ldap/base)

Thanks.

Kind regards,
mosu

The Default Primary Group setting in the LDAP tree is indeed empty. Here is the output of

univention-ldapsearch -LLL -o ldif-wrap=no -b cn=default,cn=univention,$(ucr get ldap/base)
dn: cn=default,cn=univention,dc=airwerk,dc=local
objectClass: top
objectClass: univentionDefault
objectClass: univentionObject
univentionObjectType: settings/default
cn: default
univentionDefaultComputerGroup: cn=Windows Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultDomainControllerGroup: cn=DC Slave Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultDomainControllerMasterGroup: cn=DC Backup Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultClientGroup: cn=Computers,cn=groups,dc=airwerk,dc=local
univentionDefaultMemberserverGroup: cn=Computers,cn=groups,dc=airwerk,dc=local
univentionDefaultGroup:: Y249RG9tw6RuZW4tQmVudXR6ZXIsY249Z3JvdXBzLGRjPWFpcndlcmssZGM9bG9jYWw=

Hey,

then set the default group in the object and try the join script again.

Kind regards,
mosu

Yes, that did the trick, all join scripts have run successfully! I wonder if this setting has been missing with 4.1 where I updated from, cause 4.1 ran flawless.

Many thanks to you damrose and mosu!

Best regards
Dirk

No sorry, I updated from 4.2

Hey,

did you rename your group “Domain Users” to “Domänen-Benutzer” during that time (or the other way around)?

m.

The output of univention-pkgdb-scan is still not succesful

Cannot find service-record of _pkgdb._tcp.
No DB-Server-Name found

last lines of

/var/log/univention/pkgdb.log
2018-05-24 13:00:02 pkgdbu OK
2018-05-24 13:00:42 get dbservername for airwerk.local
2018-05-24 13:00:42 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:04:23 get dbservername for airwerk.local
2018-05-24 13:04:23 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:06:05 get dbservername for airwerk.local
2018-05-24 13:06:05 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:06:53 get dbservername for airwerk.local
2018-05-24 13:06:53 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:08:45 get dbservername for airwerk.local
2018-05-24 13:08:45 Cannot find service-record of _pkgdb._tcp.

postgres seems to be running, there’s a pidfile at
/var/run/postgresql:5432

File var/log/postgresql/postgresql-9.4-main.log looks clean

I suspect that somehow the db credentials are not correct, how could I check that?

Oh sorry, had not seen your post before - I had not renamed the group

The UCS is configured as backup DC for a WIN SBS 2008 and no group name changes have been made before update

Hey,

Just FYI: such a setup (mixing Windows-based AD DCs and Samba-/UCS-based AD DCs) isn’t supported by Univention. The primary reason is that there’s no replication of the sysvol share and with it the group policies between Windows-based and Samba-based DCs.

Kind regards,
mosu

I had started with 4.1 ~ two years ago and did a domain join to an AD domain, that went without problems up to version 4.2. Since the upgrade to 4.3 the system is not stable anymore. I can’t exactly understand what you mean with mixing environments. I never had the intention to do so

I do have the former 4.2 installation as VM. I could start that for testing purposes to find out if there was a problem before the upgrade to 4.3. Would that be of help?

Hey,

not really, and I’m not really interested in supporting mixed Windows-DC/Samba-DC environments either, to be honest. You said that the join script works after setting the default group; you can just continue with that.

m.

OK, many thanks for your attention anyway!

Mastodon