After upgrade to 4.3 join script fails

geckpi · May 23, 2018, 1:59pm

version/erratalevel: 87
version/patchlevel: 0
version/version: 4.3

After the upgrade to 4.3 the join script 91univention-saml.inst cannot be run succesfully. Here is the output of univention-run-join-scripts

univention-run-join-scripts started
Mi 23. Mai 15:14:20 CEST 2018

RUNNING 91univention-saml.inst
2018-05-23 15:14:20.583349254+02:00 (in joinscript_init)
Not updating saml/idp/certificate/privatekey
Not updating saml/idp/certificate/certificate
Not updating saml/idp/entityID
Not updating ucs/server/sso/fqdn
File: /etc/apache2/sites-available/univention-saml.conf
Adding A record "ucs-sso 192.168.178.189" to zone airwerk.local...
done
23.05.18 15:14:21.972  DEBUG_INIT
E: Insufficient information: The following properties are missing:
primaryGroup
EXITCODE=3

Mi 23. Mai 15:14:22 CEST 2018
univention-run-join-scripts finished

Also nslookup ucs-sso shows no good result

Server:		192.168.178.10
Address:	192.168.178.10#53

** server can't find ucs-sso: SERVFAIL

The output of univention-pkgdb-scan is

Cannot find service-record of _pkgdb._tcp.
No DB-Server-Name found

The service-record does exist, postgresql 9.4 has been installed before the upgrade to 4.3 ,considering https://help.univention.com/t/updating-from-postgresql-9-1-to-postgresql-9-4/8073
and
https://help.univention.com/t/postgresql-fehler-bei-upgrade-von-4-2-4-3/8650

I have no idea how to go on, if someone has a clue, it will be highly appreciated!

geckpi · May 23, 2018, 2:18pm

Also

smbclient -UAdministrator //$(ucr get hostname)/sysvol -c quit

shows no success

Enter AIRWERK\Administrator's password: 
tree connect failed: NT_STATUS_BAD_NETWORK_NAME

LDAP connection is fine

univention-ldapsearch -s base -LLL dn
dn: dc=airwerk,dc=local

damrose · May 23, 2018, 3:45pm

Can you edit the joinscript in /usr/lib/univention-install/91univention-saml.inst and add one line to create more debug output? Right below eval "$(ucr shell)" add a new line with set -x.
Then, execute the joinscript again with univention-run-join-scripts and paste the output from /var/log/univention/join.log

geckpi · May 23, 2018, 4:08pm

Thanks for your reply!
Since I’m a new user I cannot attach files - Here are the last approx 500 lines of/var/log/univention/join.log after having edited 91univention-saml.inst


++ sshd_xdisplayoffset=
++ sshd_xforwarding=no
++ sshd_xuselocalhost=
++ ssl_ca_cipher=aes256
++ ssl_common='Univention Corporate Server Root CA (ID=SfPHwpLc)'
++ ssl_country=US
++ ssl_crl_interval=7
++ ssl_crl_validity=10
++ ssl_default_bits=2048
++ ssl_default_days=1825
++ ssl_default_hashfunction=sha256
++ ssl_email=ssl@airwerk.local
++ ssl_host_extensions=
++ ssl_host_objectclass=univentionDomainController,univentionMemberServer,univentionClient,univentionMobileClient,univentionCorporateClient
++ ssl_locality=DE
++ ssl_organization=DE
++ ssl_organizationalunit='Univention Corporate Server'
++ ssl_state=DE
++ ssl_update_expired=yes
++ ssl_validity_check=yes
++ ssl_validity_host=18886
++ ssl_validity_root=18886
++ ssl_validity_warning=30
++ stunnel_debuglevel=
++ syslog_auth=
++ syslog_cron=
++ syslog_daemon=
++ syslog_debug_selector=
++ syslog_debug=
++ syslog_input_relp=
++ syslog_input_tcp=
++ syslog_input_udp=
++ syslog_kern=
++ syslog_limit_burst=
++ syslog_limit_interval=
++ syslog_lpr=
++ syslog_mail_mirrorto_syslog=no
++ syslog_mail=
++ syslog_maxmessagesize=
++ syslog_messages_selector=
++ syslog_messages=
++ syslog_news=
++ syslog_remote_fallback=
++ syslog_remote_selector=
++ syslog_remote=
++ syslog_syslog_avoid_duplicate_messages=
++ syslog_syslog_selector=
++ syslog_syslog=
++ syslog_template_default=
++ syslog_user=
++ syslog_xconsole_selector=
++ syslog_xconsole=
++ system_setup_boot_fields_blacklist=
++ system_setup_boot_help=
++ system_setup_boot_minimal_memory=
++ system_setup_boot_nssldaptimeout=30
++ system_setup_boot_pages_blacklist=
++ system_setup_boot_select_role=true
++ system_setup_boot_start=false
++ system_setup_packages_blacklist=
++ system_setup_packages_whitelist=
++ system_setup_showloginmessage=false
++ system_stats_cron='0,30 * * * *'
++ system_stats=yes
++ systemd_journald_MaxFileSec='1 day'
++ systemd_journald_MaxRetentionSec='12 week'
++ systemd_journald_SplitMode=
++ systemd_journald_Storage=persistent
++ systemd_journald_SystemKeepFree=
++ systemd_journald_SystemMaxFileSize=100M
++ systemd_journald_SystemMaxUse=
++ timeserver2=
++ timeserver3=
++ timeserver=192.168.178.10
++ ucr_backup_enabled=yes
++ ucr_encoding_strict=true
++ ucr_output_brief=
++ ucr_replog_enabled=yes
++ ucs_server_languages_de_AT='Deutsch (Österreich)'
++ ucs_server_languages_de_CH='Deutsch (Schweiz)'
++ ucs_server_languages_de_DE=Deutsch
++ ucs_server_languages_en_GB='English (United Kingdom)'
++ ucs_server_languages_en_US=English
++ ucs_server_robots_allow=
++ ucs_server_robots_disallow=/
++ ucs_server_saml_idp_server_ucs_airwerk_airwerk_local=ucs-airwerk.airwerk.local
++ ucs_server_sso_autoregistraton=
++ ucs_server_sso_certificate_download=
++ ucs_server_sso_certificate_generation=
++ ucs_server_sso_fqdn=ucs-sso.airwerk.local
++ ucs_server_sso_virtualhost=true
++ ucs_web_overview_entries_admin_nagios_description_de='Netzwerk-, Host- und Serviceüberwachung'
++ ucs_web_overview_entries_admin_nagios_description='Network, host and service monitoring system'
++ ucs_web_overview_entries_admin_nagios_label_de='Univention Nagios'
++ ucs_web_overview_entries_admin_nagios_label='Univention Nagios'
++ ucs_web_overview_entries_admin_nagios_link=/nagios/
++ ucs_web_overview_entries_admin_nagios_priority=50
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description_de='Zentrale Portal-Webseite für die UCS-Domäne'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description_fr='Page web du portail central du domaine UCS'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_description='Central portal web page for the UCS domain'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_icon=/univention/portal/portal-logo.svg
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label_de='Univention Portal'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label_fr='Portail Univention'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_label='Univention Portal'
++ ucs_web_overview_entries_admin_ucs_local_to_domain_link=/univention/portal/
++ umask=
++ umc_http_autostart=yes
++ umc_http_content_security_policy_connect_src=''\''self'\'''
++ umc_http_content_security_policy_default_src=''\''unsafe-eval'\'''
++ umc_http_content_security_policy_font_src=''\''self'\'''
++ umc_http_content_security_policy_form_action=''\''self'\'''
++ umc_http_content_security_policy_frame_ancestors=''\''self'\'''
++ umc_http_content_security_policy_frame_src='*'
++ umc_http_content_security_policy_img_src='*'
++ umc_http_content_security_policy_media_src='*'
++ umc_http_content_security_policy_object_src=''\''self'\'''
++ umc_http_content_security_policy_script_src=''\''self'\'' '\''unsafe-inline'\'' '\''unsafe-eval'\'' https://www.youtube.com/ https://s.ytimg.com/'
++ umc_http_content_security_policy_style_src=''\''self'\'' '\''unsafe-inline'\'''
++ umc_http_interface=127.0.0.1
++ umc_http_max_request_body_size=
++ umc_http_maxthreads=
++ umc_http_port=8090
++ umc_http_requestqueuesize=
++ umc_http_response_timeout=310
++ umc_http_session_timeout=28800
++ umc_http_show_tracebacks=
++ umc_logout_location=
++ umc_module_debug_level=2
++ umc_module_setup_wizard_disabled=true
++ umc_module_timeout=600
++ umc_module_udm_users_self_disabled=true
++ umc_saml_grace_time=
++ umc_saml_idp_server=https://ucs-sso.airwerk.local/simplesamlphp/saml2/idp/metadata.php
++ umc_saml_sp_server=
++ umc_saml_trusted_sp_ucs_airwerk_airwerk_local=ucs-airwerk.airwerk.local
++ umc_self_service_passwordreset_blacklist_groups='Administrators,Domain Admins'
++ umc_self_service_passwordreset_blacklist_users=
++ umc_self_service_passwordreset_email_enabled=yes
++ umc_self_service_passwordreset_email_sender_address='Password Reset Service <noreply@ucs-airwerk.airwerk.local>'
++ umc_self_service_passwordreset_email_server=localhost
++ umc_self_service_passwordreset_email_text_file=
++ umc_self_service_passwordreset_email_token_length=
++ umc_self_service_passwordreset_email_webserver_address=ucs-airwerk.airwerk.local
++ umc_self_service_passwordreset_enabled=yes
++ umc_self_service_passwordreset_external_command=
++ umc_self_service_passwordreset_external_enabled=no
++ umc_self_service_passwordreset_external_method=
++ umc_self_service_passwordreset_external_method_label=
++ umc_self_service_passwordreset_external_token_length=
++ umc_self_service_passwordreset_external_udm_property=
++ umc_self_service_passwordreset_limit_per_user_day=120
++ umc_self_service_passwordreset_limit_per_user_hour=60
++ umc_self_service_passwordreset_limit_per_user_minute=10
++ umc_self_service_passwordreset_limit_total_day=1000
++ umc_self_service_passwordreset_limit_total_hour=200
++ umc_self_service_passwordreset_limit_total_minute=120
++ umc_self_service_passwordreset_sms_command=
++ umc_self_service_passwordreset_sms_country_code=
++ umc_self_service_passwordreset_sms_enabled=no
++ umc_self_service_passwordreset_sms_password_file=
++ umc_self_service_passwordreset_sms_token_length=
++ umc_self_service_passwordreset_token_validity_period=
++ umc_self_service_passwordreset_whitelist_groups='Domain Users'
++ umc_self_service_passwordreset_whitelist_users=
++ umc_server_autostart=yes
++ umc_server_debug_level=2
++ umc_server_disable_security_restrictions=true
++ umc_server_ssl_ciphers=
++ umc_server_upload_max=2048
++ umc_server_upload_min_free_space=51200
++ umc_web_appliance_data_path=
++ umc_web_appliance_fast_setup_mode=true
++ umc_web_appliance_logo=
++ umc_web_appliance_name=
++ umc_web_favorites_default=udm:users/user,udm:groups/group,udm:computers/computer,appcenter:appcenter,updater
++ umc_web_feedback_description='[UMC-Feedback] Traceback'
++ umc_web_feedback_mail=feedback@univention.de
++ umc_web_hooks_univention_management_console_module_passwordchange=passwordchange
++ umc_web_hooks_univention_self_service=passwordreset
++ umc_web_hooks_univention_web_js=default_menu_entries
++ umc_web_host_referrallimit=
++ umc_web_piwik=
++ umc_web_sso_enabled=true
++ umc_web_sso_newwindow=true
++ umc_web_startupdialog=false
++ univention_x_defaultsession=KDE
++ update_available=no
++ update_check_boot_debug=no
++ update_check_boot_enabled=yes
++ update_check_cron_debug=no
++ update_check_cron_enabled=yes
++ update_check_cron_entry='5 * * * *'
++ update_commands_configure='dpkg --configure -a'
++ update_commands_distupgrade_simulate='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -us dist-upgrade'
++ update_commands_distupgrade='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u dist-upgrade'
++ update_commands_install_interactive='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir install'
++ update_commands_install='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 install'
++ update_commands_remove_interactive='apt-get remove'
++ update_commands_remove='apt-get --yes remove'
++ update_commands_show='apt-cache show'
++ update_commands_update='apt-get update'
++ update_commands_upgrade_simulate='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -us upgrade'
++ update_commands_upgrade='apt-get -o DPkg::Options::=--force-confold -o DPkg::Options::=--force-overwrite -o DPkg::Options::=--force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u upgrade'
++ update_custom_postup=/var/lib/local-postup.sh
++ update_custom_preup=/var/lib/local-preup.sh
++ update_secure_apt=yes
++ update_umc_nextversion=true
++ update_umc_updateprocess_easy=
++ update_warning_coloured=no
++ update_warning_lang=default
++ update_warning_releasenotes=
++ update_warning_tty='/dev/tty1 /dev/tty2 /dev/tty3 /dev/tty4 /dev/tty5 /dev/tty6 /dev/tty7'
++ update_warning=no
++ updater_identify='UCS (VirtualBox)'
++ updater_statistics=U:0a,R:M
++ uuid_license=
++ uuid_system=9b9259fc-4c7d-4a5f-8a1e-83cd789b5d44
++ uvmm_check_interval=2
++ uvmm_check_timeout=10
++ uvmm_debug_command=INFO
++ uvmm_debug_ldap=WARNING
++ uvmm_debug_node=INFO
++ uvmm_debug_unix=WARNING
++ uvmm_debug=INFO
++ uvmm_novnc_autostart=
++ uvmm_pool_default_path=/var/lib/libvirt/images
++ uvmm_umc_autosearch=true
++ uvmm_umc_autoupdate_interval=5
++ version_erratalevel=87
++ version_patchlevel=0
++ version_releasename=Neustadt
++ version_version=4.3
++ welcome_screen_autostart=
++ windows_domain=AIRWERK
++ windows_wins_server=
++ windows_wins_support=no
++ xorg_autodetect_dri=
++ xorg_autodetect=no
++ xorg_device_BoardName=All
++ xorg_device_VendorName=All
++ xorg_device_driver=
++ xorg_display_primary=
++ xorg_display_relative_position=
++ xorg_display_secondary=
++ xorg_display_virtual=
++ xorg_keyboard_options_XkbLayout=de
++ xorg_keyboard_options_XkbModel=pc105
++ xorg_keyboard_options_XkbOptions=
++ xorg_keyboard_options_XkbVariant=
++ xorg_module_load='bitmap;ddc;dri;extmod;freetype;glx;int10;vbe;dbe;GLcore;xie;pex5;speedo;type1;record'
++ xorg_monitor_DisplaySize=
++ xorg_monitor_HorizSync=30-70
++ xorg_monitor_VertRefresh=50-90
++ xorg_mouse_psaux_Driver=mouse
++ xorg_mouse_psaux_Identifier='PS/2 Mouse'
++ xorg_mouse_psaux_disabled=true
++ xorg_mouse_psaux_options_Buttons=5
++ xorg_mouse_psaux_options_Emulate3Buttons=true
++ xorg_mouse_psaux_options_Emulate3Timeout=70
++ xorg_mouse_psaux_options_SendCoreEvents=true
++ xorg_mouse_psaux_options_ZAxisMapping='4 5'
++ xorg_mouse_psaux_options_device=/dev/psaux
++ xorg_mouse_psaux_options_protocol=auto
++ xorg_mouse_serial1_Driver=mouse
++ xorg_mouse_serial1_Identifier='Serial Mouse'
++ xorg_mouse_serial1_disabled=true
++ xorg_mouse_serial1_options_Emulate3Buttons=true
++ xorg_mouse_serial1_options_Emulate3Timeout=70
++ xorg_mouse_serial1_options_SendCoreEvents=true
++ xorg_mouse_serial1_options_device=/dev/ttyS0
++ xorg_mouse_serial1_options_protocol=auto
++ xorg_mouse_serial2_Driver=mouse
++ xorg_mouse_serial2_Identifier='Serial Mouse ttyS1'
++ xorg_mouse_serial2_disabled=true
++ xorg_mouse_serial2_options_Emulate3Buttons=true
++ xorg_mouse_serial2_options_Emulate3Timeout=70
++ xorg_mouse_serial2_options_SendCoreEvents=true
++ xorg_mouse_serial2_options_device=/dev/ttyS1
++ xorg_mouse_serial2_options_protocol=auto
++ xorg_mouse_usb_Driver=mouse
++ xorg_mouse_usb_Identifier='USB Mouse'
++ xorg_mouse_usb_options_Buttons=5
++ xorg_mouse_usb_options_SendCoreEvents=true
++ xorg_mouse_usb_options_ZAxisMapping='4 5'
++ xorg_mouse_usb_options_device=/dev/input/mice
++ xorg_mouse_usb_options_protocol=auto
++ xorg_resolution_secondary=
++ xorg_resolution=1024x768
++ xorg_screen_DefaultDepth=16
++ xorg_serverflags_options_AllowEmptyInput=false
++ xorg_serverflags_options_AllowMouseOpenFail=true
+ SECRETFILE=/etc/idp-ldap-user.secret
+ HOSTPWD=/etc/machine.secret
+ HOSTACCOUNT='ucs-airwerk$'
+ '[' domaincontroller_master = domaincontroller_master ']'
++ ucs_getAttrOfDN uid uid=sys-idp-user,cn=users,dc=airwerk,dc=local
+ username=sys-idp-user
+ '[' '!' sys-idp-user = sys-idp-user ']'
+ '[' '!' -e /etc/simplesamlphp/ucs-sso.airwerk.local-idp-certificate.crt ']'
+ ucr commit /etc/apache2/sites-available/univention-saml.conf
File: /etc/apache2/sites-available/univention-saml.conf
++ echo ucs-sso.airwerk.local
++ cut -d . -f 1
+ sso_hostname=ucs-sso
++ echo ucs-sso.airwerk.local
++ cut -d . -f 2-
+ sso_domainname=airwerk.local
+ '[' -z '' ']'
++ get_default_ip_address
++ PYTHONPATH=/usr/lib/pymodules/python2.7/univention/config_registry
++ python2.7 -c 'from interfaces import Interfaces;print Interfaces().get_default_ip_address().ip'
+ /usr/share/univention-directory-manager-tools/univention-dnsedit --ignore-exists airwerk.local add a ucs-sso 192.168.178.189
Adding A record "ucs-sso 192.168.178.189" to zone airwerk.local...
done
+ is_localhost_in_admember_mode
+ python -c '
import univention.lib.admember
import sys
univention.lib.admember.initialize_debug()
if univention.lib.admember.is_localhost_in_admember_mode():
        sys.exit(0)
else:
        sys.exit(1)
'
23.05.18 17:50:38.923  DEBUG_INIT
+ ucs_parseCredentials
+ '[' 0 -ge 1 ']'
+ '[' -n '' ']'
+ create_krb_apache2_user
+ '[' domaincontroller_master == domaincontroller_master ']'
++ create_machine_password
+++ /usr/sbin/univention-config-registry get machine/password/length
++ local length=
+++ /usr/sbin/univention-config-registry get machine/password/complexity
++ local compl=
++ '[' -z '' ']'
++ length=20
++ '[' -z '' ']'
++ compl=scn
++ pwgen -1 -scn 20
++ tr -d '\n'
+ spn_account_name_password=6zkU8Z3ssMPh773YSqTW
+ touch /etc/simplesamlphp/ucs-sso-kerberos.secret
+ chown root:root /etc/simplesamlphp/ucs-sso-kerberos.secret
+ chmod 600 /etc/simplesamlphp/ucs-sso-kerberos.secret
+ echo -n 6zkU8Z3ssMPh773YSqTW
+ udm users/user create --ignore_exists --position cn=users,dc=airwerk,dc=local --set username=ucs-sso --set lastname=SSO --set password=6zkU8Z3ssMPh773YSqTW --append objectFlag=hidden
E: Insufficient information: The following properties are missing:
primaryGroup
+ die
+ rc=3
+ joinscript_log_error
+ local line
+ echo -en ''
+ read line
+ exit 3
EXITCODE=3
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed

Mi 23. Mai 17:50:39 CEST 2018
univention-run-join-scripts finished

Moritz_Bunkus · May 24, 2018, 7:17am

Hey,

when udm users/user create is called without specifying the primary group, the tool looks up the default primary group from a “default settings” object in the LDAP directory.

You should verify that the policy exist, that its primary group setting is not empty and that the group mentioned therein actually exists:

Log in to the Univention Management Console
Navigate to “Domain” → “LDAP directory”
In the tree click on the “univention” node
In the list on the right there should be an entry called default. Click on it.
On the “Primary Groups” tab verify the “Default Primary Group” setting.

For our benefit, please post the output of the following command which lists the content of said object:

univention-ldapsearch -LLL -o ldif-wrap=no -b cn=default,cn=univention,$(ucr get ldap/base)

Thanks.

Kind regards,
mosu

geckpi · May 24, 2018, 9:32am

The Default Primary Group setting in the LDAP tree is indeed empty. Here is the output of

univention-ldapsearch -LLL -o ldif-wrap=no -b cn=default,cn=univention,$(ucr get ldap/base)

dn: cn=default,cn=univention,dc=airwerk,dc=local
objectClass: top
objectClass: univentionDefault
objectClass: univentionObject
univentionObjectType: settings/default
cn: default
univentionDefaultComputerGroup: cn=Windows Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultDomainControllerGroup: cn=DC Slave Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultDomainControllerMasterGroup: cn=DC Backup Hosts,cn=groups,dc=airwerk,dc=local
univentionDefaultClientGroup: cn=Computers,cn=groups,dc=airwerk,dc=local
univentionDefaultMemberserverGroup: cn=Computers,cn=groups,dc=airwerk,dc=local
univentionDefaultGroup:: Y249RG9tw6RuZW4tQmVudXR6ZXIsY249Z3JvdXBzLGRjPWFpcndlcmssZGM9bG9jYWw=

Moritz_Bunkus · May 24, 2018, 9:37am

Hey,

then set the default group in the object and try the join script again.

Kind regards,
mosu

geckpi · May 24, 2018, 9:47am

Yes, that did the trick, all join scripts have run successfully! I wonder if this setting has been missing with 4.1 where I updated from, cause 4.1 ran flawless.

Many thanks to you damrose and mosu!

Best regards
Dirk

geckpi · May 24, 2018, 9:49am

No sorry, I updated from 4.2

Moritz_Bunkus · May 24, 2018, 11:17am

Hey,

did you rename your group “Domain Users” to “Domänen-Benutzer” during that time (or the other way around)?

m.

geckpi · May 24, 2018, 11:30am

The output of univention-pkgdb-scan is still not succesful

Cannot find service-record of _pkgdb._tcp.
No DB-Server-Name found

last lines of

/var/log/univention/pkgdb.log

2018-05-24 13:00:02 pkgdbu OK
2018-05-24 13:00:42 get dbservername for airwerk.local
2018-05-24 13:00:42 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:04:23 get dbservername for airwerk.local
2018-05-24 13:04:23 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:06:05 get dbservername for airwerk.local
2018-05-24 13:06:05 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:06:53 get dbservername for airwerk.local
2018-05-24 13:06:53 Cannot find service-record of _pkgdb._tcp.
2018-05-24 13:08:45 get dbservername for airwerk.local
2018-05-24 13:08:45 Cannot find service-record of _pkgdb._tcp.

postgres seems to be running, there’s a pidfile at
/var/run/postgresql:5432

File var/log/postgresql/postgresql-9.4-main.log looks clean

I suspect that somehow the db credentials are not correct, how could I check that?

geckpi · May 24, 2018, 11:32am

Oh sorry, had not seen your post before - I had not renamed the group

geckpi · May 24, 2018, 11:33am

The UCS is configured as backup DC for a WIN SBS 2008 and no group name changes have been made before update

Moritz_Bunkus · May 24, 2018, 11:35am

Hey,

Just FYI: such a setup (mixing Windows-based AD DCs and Samba-/UCS-based AD DCs) isn’t supported by Univention. The primary reason is that there’s no replication of the sysvol share and with it the group policies between Windows-based and Samba-based DCs.

Kind regards,
mosu

geckpi · May 24, 2018, 11:45am

I had started with 4.1 ~ two years ago and did a domain join to an AD domain, that went without problems up to version 4.2. Since the upgrade to 4.3 the system is not stable anymore. I can’t exactly understand what you mean with mixing environments. I never had the intention to do so

geckpi · May 24, 2018, 11:48am

I do have the former 4.2 installation as VM. I could start that for testing purposes to find out if there was a problem before the upgrade to 4.3. Would that be of help?

Moritz_Bunkus · May 24, 2018, 11:49am

Hey,

not really, and I’m not really interested in supporting mixed Windows-DC/Samba-DC environments either, to be honest. You said that the join script works after setting the default group; you can just continue with that.

m.

geckpi · May 24, 2018, 7:18pm

OK, many thanks for your attention anyway!