OX auf Master Update auf UCS 4.3

open-xchange

#1

Servus aus München,

ich habe OX aktuell auf UCS 4.2-5 installiert. OX ist hier auf dem Domain Controller Master installiert und es gibt keine Slaves.

Laut der Updateanleitung unter Update to OX App Suite 7.10.0 for UCS 4.3 muss ich damit nichts weiter beachten.

Leider bricht das Update auf 4.3 trotzdem mit der Meldung “ERROR: The OX Appsuite LDAP schema registration is incorrect.” ab.

Kann mir da jemand weiterhelfen?

Grüße
kreiner


Greetings from Munich,

i have a system running 4.2-5 with OX installed. OX is installed on the domain controller master and there are no slaves.
As stated in the update instructions Update to OX App Suite 7.10.0 for UCS 4.3 i should not have anything to consider while updating.

Unfortunately the update to 4.3 still fails with this message: “ERROR: The OX Appsuite LDAP schema registration is incorrect.”

Anyone who knows a solution to this problem?


#2

The LDAP schema registration happens when installing OX App Suite version 7.8.4-ucs11 in UCS 4.2. Please check (and post here) the installed app version by running:

univention-app info

Greeings
Daniel


#3

Hi @kreiner

Normally the schema adjustment should be done automatically on a master with installed OX App Suite. This doesn’t seem to have happened with you here.

To tell you the necessary steps to fix it, we need the information from the call of univention-app info and the output of two other commands, which have to be executed as user root on the command line:

  1. ucr get ox/master/42/registered_ldap_acls
  2. udm settings/ldapschema list | egrep 'DN:|active|packageversion'

Best regards,

Sönke


#4

Here is the output of univention-app info:

root@ldap:~# univention-app info
UCS: 4.2-5 errata515
App Center compatibility: 4
Installed: kde=4 letsencrypt=1.1.2-8 mailserver=11 oxseforucs=7.8.4-ucs11 pkgdb=10 samba4=4.6 self-service=2.0
Upgradable:

Output of 1.

root@ldap:~# ucr get ox/master/42/registered_ldap_acls
yes

Output of 2.

root@ldap:~# udm settings/ldapschema list | egrep 'DN:|active|packageversion'
DN: cn=univention-app,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 5.0.22-23.229.201610261703
DN: cn=self-service-passwordreset,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 1.0.3-21.67.201603010947
DN: cn=networkaccess,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 3.0.0-6.19.201510141005
DN: cn=msgpo,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=mswmi,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=msprintconnectionpolicy,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=oxforucs,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 9.0.8-1A~4.2.0.20180503
DN: cn=oxforucs-extra,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 9.0.8-1A~4.2.0.20180503

Thanks for your help!

Best regards to both of you!
kreiner


#5

Can you please post the output of:

egrep '^include.*ox' /etc/ldap/slapd.conf

Thank you
Daniel


#6

Output of egrep:

fkreiner@ldap:~$ egrep '^include.*ox' /etc/ldap/slapd.conf
include         /var/lib/univention-ldap/local-schema/oxforucs-extra.schema
include         /var/lib/univention-ldap/local-schema/oxforucs.schema

Thanks a lot!


#7

The output of the commands looks good so far. I cannot see any reason, why the update aborts.

Did you do any further steps after the first update abortion. E.g. an update of the OX app?

If possible, please start the update to UCS 4.3-0 again. If the update fails again, please send me the file /var/log/univention/updater.log, so we can check why the updater thinks that the update has to be aborted.

Best regards,

Sönke


#8

I didn’t update OX after the first abortion.
I just tried to upgrade again and got the same result.
Here is the updater.log

root@ldap:~# cat /var/log/univention/updater.log

Starting univention-upgrade. Current UCS version is 4.2-5 errata515

Checking for local repository:                          none
Checking for package updates:                           none
Checking for app updates:                              Calling upgrade-search
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.upgrade-search:Calling upgrade-search
0
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.upgrade-search.progress:0
Calling update
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.update:Calling update
0
2018-09-29 22:52:58,748 DEBUG:univention.appcenter.actions.update.progress:0
Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
2018-09-29 22:52:58,752 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
  ... Not Modified
2018-09-29 22:52:58,823 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/rating.ini"...
2018-09-29 22:52:58,825 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/rating.ini"...
  ... Not Modified
2018-09-29 22:52:58,898 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/license_types.ini"...
2018-09-29 22:52:58,900 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/license_types.ini"...
  ... Not Modified
2018-09-29 22:52:58,975 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/ucs.ini"...
2018-09-29 22:52:58,977 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/ucs.ini"...
  ... Not Modified
2018-09-29 22:52:59,058 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz"...
2018-09-29 22:52:59,064 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,147 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz.gpg"...
2018-09-29 22:52:59,149 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,229 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/all.tar.gpg"...
2018-09-29 22:52:59,231 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,312 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz"...
2018-09-29 22:52:59,315 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,396 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz.gpg"...
2018-09-29 22:52:59,398 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,478 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/all.tar.gpg"...
2018-09-29 22:52:59,480 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,561 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz"...
2018-09-29 22:52:59,568 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,650 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz.gpg"...
2018-09-29 22:52:59,652 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,733 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg"...
2018-09-29 22:52:59,735 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,818 DEBUG:univention.appcenter.actions.update:  ... Not Modified
100
2018-09-29 22:52:59,821 DEBUG:univention.appcenter.actions.update.progress:100
Cache outdated. Need to rebuild
2018-09-29 22:52:59,822 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 202 apps from cache
2018-09-29 22:53:00,030 DEBUG:univention.appcenter.cache:Loaded 202 apps from cache
Cache outdated. Need to rebuild
2018-09-29 22:53:00,030 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 99 apps from cache
2018-09-29 22:53:00,123 DEBUG:univention.appcenter.cache:Loaded 99 apps from cache
Cache outdated. Need to rebuild
2018-09-29 22:53:00,123 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 382 apps from cache
2018-09-29 22:53:00,377 DEBUG:univention.appcenter.cache:Loaded 382 apps from cache
Checking kde=4
2018-09-29 22:53:01,127 DEBUG:univention.appcenter.actions.upgrade-search:Checking kde=4
Checking letsencrypt=1.1.2-8
2018-09-29 22:53:01,138 DEBUG:univention.appcenter.actions.upgrade-search:Checking letsencrypt=1.1.2-8
Checking mailserver=11
2018-09-29 22:53:01,149 DEBUG:univention.appcenter.actions.upgrade-search:Checking mailserver=11
Checking oxseforucs=7.8.4-ucs11
2018-09-29 22:53:01,159 DEBUG:univention.appcenter.actions.upgrade-search:Checking oxseforucs=7.8.4-ucs11
Checking pkgdb=10
2018-09-29 22:53:01,169 DEBUG:univention.appcenter.actions.upgrade-search:Checking pkgdb=10
Checking samba4=4.6
2018-09-29 22:53:01,179 DEBUG:univention.appcenter.actions.upgrade-search:Checking samba4=4.6
Checking self-service=2.0
2018-09-29 22:53:01,189 DEBUG:univention.appcenter.actions.upgrade-search:Checking self-service=2.0
100
2018-09-29 22:53:01,198 DEBUG:univention.appcenter.actions.upgrade-search.progress:100
none
Checking for release updates:                           found: UCS 4.3-0
Starting update to UCS version 4.3-0 at Sat Sep 29 22:53:11 2018...
Starting update to UCS version 4.3-0
29.09.18 22:53:12.353  DEBUG_INIT
**** Starting univention-updater with parameter=['/usr/share/univention-updater/univention-updater', 'net', '--updateto', '4.3-0', '--silent']
Version=4.2
Patchlevel=5
starting net mode
--->DBG:update_available(mode=net, cdrom_mount_point=/media/cdrom, iso=None)
Checking network repository
Update to = 4.3-0
**** Downloading scripts at Sat Sep 29 22:53:20 2018
**** Starting actual update at Sat Sep 29 22:53:27 2018
Running preup.sh script
Sa 29. Sep 22:53:27 CEST 2018

HINT:
Please check the release notes carefully BEFORE updating to UCS 4.3-0:
 English version: https://docs.software-univention.de/release-notes-4.3-0-en.html
 German version:  https://docs.software-univention.de/release-notes-4.3-0-de.html

Please also consider documents of following release updates and
3rd party components.

Do you want to continue [Y/n]?
Custom preupdate script /var/lib/local-preup.sh not found
dpkg: Warnung: Die Anforderung, univention-config-wrapper zu entfernen, wird ignoriert; es ist nicht installiert
Checking for space on /var/cache/apt/archives: OK
Checking for space on /boot: OK
Checking for space on /: OK
Checking for package status: OK
Checking LDAP schema: 5bafe64d OVER: Loading Translog Overlay
5bafe64d OVER: db_init
5bafe64d OVER: Configuring Translog Overlay
5bafe64d OVER: Configured Translog Overlay to use file "/var/lib/univention-ldap/listener/listener"
5bafe64d /etc/ldap/slapd.conf: line 227: rootdn is always granted unlimited privileges.
5bafe64d /etc/ldap/slapd.conf: line 235: rootdn is always granted unlimited privileges.
5bafe64d OVER: db_close
5bafe64d OVER: db_destroy
OK
ii  univention-ox-meta-singleserver 9.0.8-15A~4.2.0.201808200915 all          UCS meta package for Open-Xchange
ucrv_on_master:
ox_schema_in_ldap: dn: cn=oxforucs,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
cn: oxforucs
objectClass: top
objectClass: univentionLDAPExtensionSchema
objectClass: univentionObjectMetadata
objectClass: univentionObject
univentionOwnedByPackage: univention-ox
univentionObjectType: settings/ldapschema
univentionLDAPSchemaFilename: oxforucs.schema
univentionLDAPSchemaData:: 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
univentionLDAPSchemaActive: TRUE
univentionOwnedByPackageVersion: 9.0.8-1A~4.2.0.20180503
univentionAppIdentifier: oxseforucs_7.8.2-4-ucs2
univentionAppIdentifier: oxseforucs_7.8.2-4-ucs4
univentionAppIdentifier: oxseforucs_7.8.4-ucs2
univentionAppIdentifier: oxseforucs_7.8.4-ucs11

ERROR: The OX Appsuite LDAP schema registration is incorrect.
Aborting the upgrade. For instructions on how to proceed, please refer to
https://help.univention.com/t/9440

Error: Update aborted by pre-update script of release 4.3-0
exitcode of univention-updater: 1
ERROR: update failed. Please check /var/log/univention/updater.log

#9

Hello,

if I see this correctly, this is the problem:

It should say: ucrv_on_master: yes

In comment 4 you have already evaluated the UCR variable ox/master/42/registered_ldap_acls directly. In the test this happens via SSH (for the case where OX is not installed on the DC master). This fails in your case.

As everything seems fine, the solution is to simply disable the check (this is not a “solution” - it does not fix anything, but instead ignores existing problems - other readers: don’t do this unless told to!):

  • ucr set update43/ignore_ox_schema_issue=yes
  • start the upgrade again

But it would be nice, if you could help us understand why this happend. Before starting the upgrade please run (and c&p the output here):

eval "$(univention-config-registry shell)"
univention-ssh /etc/machine.secret ${hostname}\$@$ldap_master /usr/sbin/ucr get ox/master/42/registered_ldap_acls

Thank you and greetings
Daniel


#10

Hi again,

are there any changes made to the SSH UCR variables regarding login on the UCS master?
SSH login only for certain users/groups? Login only via SSH key for all users? or something like that?

Best regards

Sönke


#11

Hi you two,

I changed some UCR variables to only accept certificates for ssh logins.
Output of univention-ssh command shows “Permission denied”.

I didn’t realize that the server needs ssh access to itself.

I’ll try to update with ignore_ox_schema_issue set and get back to you afterwards.

Thanks for your great help!


#12

Hi,

I was finally able to update to 4.3.

Thank you very much!

Greetings,
kreiner


#13

Hi @kreiner,

you’re welcome. And thank you very much for your feedback.

[edit]
I just updated the article https://help.univention.com/t/9440 to cover this case.
[/edit]

Best regards,

Sönke