No SAML and 92univention-management-console-web-server join script fails on new UCS 5 install

Hi. I installed fresh UCS5 in AWS in eu-central-1 region. After install, I am unable to complete two domain join scripts. 92univention-management-console-web-server and 98univention-samba4-saml-kerberos. Trying script nr92 for now. It fails, here is /var/log/univention/join.log:

RUNNING 92univention-management-console-web-server.inst                                                                                                                                                      
2022-06-09 11:14:41.209472113+01:00 (in joinscript_init)                                                                                                                                                     
W: The config registry variable 'ucs/web/overview/entries/admin/umc/icon' does not exist                                                                                                                     
W: The config registry variable 'ucs/web/overview/entries/admin/umc/link' does not exist                                                                                                                     
W: The config registry variable 'ucs/web/overview/entries/admin/umc/link/de' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/priority' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/label' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/label/de' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description/de' does not exist
LDAP Error: No such object
92univention-management-console-web-server.inst:
EXITCODE=1
525e353d-b735-42bd-af34-6b8f838ed91b
univention-join-hooks: looking for hook type "join/post-joinscripts" on ucs5.test.example.com
Found hooks:


Thu  9 Jun 11:14:42 BST 2022
univention-run-join-scripts finished

Tried reinstalling univention-management-console-web-server package but no luck:

$ sudo apt install --reinstall univention-management-console-web-server
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 0 not upgraded.
Need to get 0 B/82.9 kB of archives.
After this operation, 0 B of additional disk space will be used.
(Reading database ... 83133 files and directories currently installed.)
Preparing to unpack .../univention-management-console-web-server_12.0.12-22A~5.0.0.202204041241_all.deb ...
Unpacking univention-management-console-web-server (12.0.12-22A~5.0.0.202204041241) over (12.0.12-22A~5.0.0.202204041241) ...
Setting up univention-management-console-web-server (12.0.12-22A~5.0.0.202204041241) ...
File: /etc/apache2/sso-vhost.conf.d/01redirect.conf
File: /etc/apache2/sites-available/univention.conf
Module: configure_umc_multiprocessing
Module: setup_saml_sp
umc/saml/idp-server not set, nothing to do
Module wsgi already enabled
Module proxy already enabled
Considering dependency proxy for proxy_connect:
Module proxy already enabled
Module proxy_connect already enabled
Considering dependency proxy for proxy_http:
Module proxy already enabled
Module proxy_http already enabled
Module headers already enabled
Considering dependency proxy_balancer for lbmethod_bybusyness:
Considering dependency proxy for proxy_balancer:
Module proxy already enabled
Considering dependency alias for proxy_balancer:
Module alias already enabled
Considering dependency slotmem_shm for proxy_balancer:
Module slotmem_shm already enabled
Module proxy_balancer already enabled
Module lbmethod_bybusyness already enabled
Considering dependency proxy for proxy_balancer:
Module proxy already enabled
Considering dependency alias for proxy_balancer:
Module alias already enabled
Considering dependency slotmem_shm for proxy_balancer:
Module slotmem_shm already enabled
Module proxy_balancer already enabled
Site univention already enabled
httpd (pid 25823) already running
Not updating umc/http/session/timeout
Not updating umc/http/response-timeout
Not updating umc/http/autostart
Not updating umc/http/port
Not updating umc/http/interface
Not updating umc/server/upload/min_free_space
Not updating umc/http/content-security-policy/default-src
Not updating umc/http/content-security-policy/script-src
Not updating umc/http/content-security-policy/object-src
Not updating umc/http/content-security-policy/style-src
Not updating umc/http/content-security-policy/img-src
Not updating umc/http/content-security-policy/media-src
Not updating umc/http/content-security-policy/frame-src
Not updating umc/http/content-security-policy/font-src
Not updating umc/http/content-security-policy/connect-src
Not updating umc/http/content-security-policy/form-action
Not updating umc/http/content-security-policy/frame-ancestors
Not updating umc/login/content-security-policy/frame-ancestors
Calling joinscript 92univention-management-console-web-server.inst ...
2022-06-09 11:14:00.144655211+01:00 (in joinscript_init)
W: The config registry variable 'ucs/web/overview/entries/admin/umc/icon' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/link' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/link/de' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/priority' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/label' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/label/de' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description/de' does not exist
LDAP Error: No such object
92univention-management-console-web-server.inst:
Joinscript 92univention-management-console-web-server.inst finished with exitcode 1
Processing triggers for univention-config (15.0.7-18A~5.0.0.202202220928) ...
dpkg-query: no packages found matching ldapacl_66univention-appcenter_app.acl
Processing triggers for systemd (241-7~deb10u8A~5.0.0.202107221216) ...
roman.admin@ucs5:/var/log/univention$
roman.admin@ucs5:/var/log/univention$
roman.admin@ucs5:/var/log/univention$
roman.admin@ucs5:/var/log/univention$ sudo tail -100 /var/log/univention/join.log
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description' does not exist
W: The config registry variable 'ucs/web/overview/entries/admin/umc/description/de' does not exist
LDAP Error: No such object
92univention-management-console-web-server.inst:
EXITCODE=1
92univention-management-console-web-server.inst:
Joinscript 92univention-management-console-web-server.inst finished with exitcode 1
Processing triggers for univention-config (15.0.7-18A~5.0.0.202202220928) ...
dpkg-query: no packages found matching ldapacl_66univention-appcenter_app.acl
Processing triggers for systemd (241-7~deb10u8A~5.0.0.202107221216) ...

if it helps:

# cat /etc/lsb-release 
# Warning: This file is auto-generated and might be overwritten by
#          univention-config-registry.
#          Please edit the following file(s) instead:
# Warnung: Diese Datei wurde automatisch generiert und kann durch
#          univention-config-registry ueberschrieben werden.
#          Bitte bearbeiten Sie an Stelle dessen die folgende(n) Datei(en):
# 
#       /etc/univention/templates/files/etc/lsb-release
# 

DISTRIB_ID=Univention
DISTRIB_RELEASE="5.0-1 errata336"
DISTRIB_DESCRIPTION="Univention Corporate Server 5.0-1 errata336"

Hey,
are they any News about this? I have the same problem …

Hello. I do not remember how I solved it, sorry. You can try installing Active Directory packages, that will also add necessary dependencies.

Mastodon