OX auf Master Update auf UCS 4.3

Apps & App Center
#1

Servus aus München,

ich habe OX aktuell auf UCS 4.2-5 installiert. OX ist hier auf dem Domain Controller Master installiert und es gibt keine Slaves.

Laut der Updateanleitung unter Update to OX App Suite 7.10.0 for UCS 4.3 muss ich damit nichts weiter beachten.

Leider bricht das Update auf 4.3 trotzdem mit der Meldung “ERROR: The OX Appsuite LDAP schema registration is incorrect.” ab.

Kann mir da jemand weiterhelfen?

Grüße
kreiner

Greetings from Munich,

i have a system running 4.2-5 with OX installed. OX is installed on the domain controller master and there are no slaves.
As stated in the update instructions Update to OX App Suite 7.10.0 for UCS 4.3 i should not have anything to consider while updating.

Unfortunately the update to 4.3 still fails with this message: “ERROR: The OX Appsuite LDAP schema registration is incorrect.”

Anyone who knows a solution to this problem?

#2

The LDAP schema registration happens when installing OX App Suite version 7.8.4-ucs11 in UCS 4.2. Please check (and post here) the installed app version by running:

univention-app info

Greeings
Daniel

#3

Hi @kreiner

Normally the schema adjustment should be done automatically on a master with installed OX App Suite. This doesn’t seem to have happened with you here.

To tell you the necessary steps to fix it, we need the information from the call of univention-app info and the output of two other commands, which have to be executed as user root on the command line:

  1. ucr get ox/master/42/registered_ldap_acls
  2. udm settings/ldapschema list | egrep 'DN:|active|packageversion'

Best regards,

Sönke

#4

Here is the output of univention-app info:

root@ldap:~# univention-app info
UCS: 4.2-5 errata515
App Center compatibility: 4
Installed: kde=4 letsencrypt=1.1.2-8 mailserver=11 oxseforucs=7.8.4-ucs11 pkgdb=10 samba4=4.6 self-service=2.0
Upgradable:

Output of 1.

root@ldap:~# ucr get ox/master/42/registered_ldap_acls
yes

Output of 2.

root@ldap:~# udm settings/ldapschema list | egrep 'DN:|active|packageversion'
DN: cn=univention-app,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 5.0.22-23.229.201610261703
DN: cn=self-service-passwordreset,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 1.0.3-21.67.201603010947
DN: cn=networkaccess,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 3.0.0-6.19.201510141005
DN: cn=msgpo,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=mswmi,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=msprintconnectionpolicy,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 10.0.4-17.643.201709061415
DN: cn=oxforucs,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 9.0.8-1A~4.2.0.20180503
DN: cn=oxforucs-extra,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
  active: TRUE
  packageversion: 9.0.8-1A~4.2.0.20180503

Thanks for your help!

Best regards to both of you!
kreiner

#5

Can you please post the output of:

egrep '^include.*ox' /etc/ldap/slapd.conf

Thank you
Daniel

#6

Output of egrep:

fkreiner@ldap:~$ egrep '^include.*ox' /etc/ldap/slapd.conf
include         /var/lib/univention-ldap/local-schema/oxforucs-extra.schema
include         /var/lib/univention-ldap/local-schema/oxforucs.schema

Thanks a lot!

#7

The output of the commands looks good so far. I cannot see any reason, why the update aborts.

Did you do any further steps after the first update abortion. E.g. an update of the OX app?

If possible, please start the update to UCS 4.3-0 again. If the update fails again, please send me the file /var/log/univention/updater.log, so we can check why the updater thinks that the update has to be aborted.

Best regards,

Sönke

#8

I didn’t update OX after the first abortion.
I just tried to upgrade again and got the same result.
Here is the updater.log

root@ldap:~# cat /var/log/univention/updater.log

Starting univention-upgrade. Current UCS version is 4.2-5 errata515

Checking for local repository:                          none
Checking for package updates:                           none
Checking for app updates:                              Calling upgrade-search
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.upgrade-search:Calling upgrade-search
0
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.upgrade-search.progress:0
Calling update
2018-09-29 22:52:58,747 DEBUG:univention.appcenter.actions.update:Calling update
0
2018-09-29 22:52:58,748 DEBUG:univention.appcenter.actions.update.progress:0
Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
2018-09-29 22:52:58,752 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
  ... Not Modified
2018-09-29 22:52:58,823 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/rating.ini"...
2018-09-29 22:52:58,825 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/rating.ini"...
  ... Not Modified
2018-09-29 22:52:58,898 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/license_types.ini"...
2018-09-29 22:52:58,900 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/license_types.ini"...
  ... Not Modified
2018-09-29 22:52:58,975 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/ucs.ini"...
2018-09-29 22:52:58,977 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/ucs.ini"...
  ... Not Modified
2018-09-29 22:52:59,058 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz"...
2018-09-29 22:52:59,064 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,147 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz.gpg"...
2018-09-29 22:52:59,149 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,229 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.2/all.tar.gpg"...
2018-09-29 22:52:59,231 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.2/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,312 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz"...
2018-09-29 22:52:59,315 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,396 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz.gpg"...
2018-09-29 22:52:59,398 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,478 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.3/all.tar.gpg"...
2018-09-29 22:52:59,480 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.3/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,561 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz"...
2018-09-29 22:52:59,568 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz"...
  ... Not Modified
2018-09-29 22:52:59,650 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz.gpg"...
2018-09-29 22:52:59,652 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz.gpg"...
  ... Not Modified
2018-09-29 22:52:59,733 DEBUG:univention.appcenter.actions.update:  ... Not Modified
Downloading "https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg"...
2018-09-29 22:52:59,735 INFO:univention.appcenter.actions.update:Downloading "https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg"...
  ... Not Modified
2018-09-29 22:52:59,818 DEBUG:univention.appcenter.actions.update:  ... Not Modified
100
2018-09-29 22:52:59,821 DEBUG:univention.appcenter.actions.update.progress:100
Cache outdated. Need to rebuild
2018-09-29 22:52:59,822 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 202 apps from cache
2018-09-29 22:53:00,030 DEBUG:univention.appcenter.cache:Loaded 202 apps from cache
Cache outdated. Need to rebuild
2018-09-29 22:53:00,030 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 99 apps from cache
2018-09-29 22:53:00,123 DEBUG:univention.appcenter.cache:Loaded 99 apps from cache
Cache outdated. Need to rebuild
2018-09-29 22:53:00,123 DEBUG:univention.appcenter.cache:Cache outdated. Need to rebuild
Loaded 382 apps from cache
2018-09-29 22:53:00,377 DEBUG:univention.appcenter.cache:Loaded 382 apps from cache
Checking kde=4
2018-09-29 22:53:01,127 DEBUG:univention.appcenter.actions.upgrade-search:Checking kde=4
Checking letsencrypt=1.1.2-8
2018-09-29 22:53:01,138 DEBUG:univention.appcenter.actions.upgrade-search:Checking letsencrypt=1.1.2-8
Checking mailserver=11
2018-09-29 22:53:01,149 DEBUG:univention.appcenter.actions.upgrade-search:Checking mailserver=11
Checking oxseforucs=7.8.4-ucs11
2018-09-29 22:53:01,159 DEBUG:univention.appcenter.actions.upgrade-search:Checking oxseforucs=7.8.4-ucs11
Checking pkgdb=10
2018-09-29 22:53:01,169 DEBUG:univention.appcenter.actions.upgrade-search:Checking pkgdb=10
Checking samba4=4.6
2018-09-29 22:53:01,179 DEBUG:univention.appcenter.actions.upgrade-search:Checking samba4=4.6
Checking self-service=2.0
2018-09-29 22:53:01,189 DEBUG:univention.appcenter.actions.upgrade-search:Checking self-service=2.0
100
2018-09-29 22:53:01,198 DEBUG:univention.appcenter.actions.upgrade-search.progress:100
none
Checking for release updates:                           found: UCS 4.3-0
Starting update to UCS version 4.3-0 at Sat Sep 29 22:53:11 2018...
Starting update to UCS version 4.3-0
29.09.18 22:53:12.353  DEBUG_INIT
**** Starting univention-updater with parameter=['/usr/share/univention-updater/univention-updater', 'net', '--updateto', '4.3-0', '--silent']
Version=4.2
Patchlevel=5
starting net mode
--->DBG:update_available(mode=net, cdrom_mount_point=/media/cdrom, iso=None)
Checking network repository
Update to = 4.3-0
**** Downloading scripts at Sat Sep 29 22:53:20 2018
**** Starting actual update at Sat Sep 29 22:53:27 2018
Running preup.sh script
Sa 29. Sep 22:53:27 CEST 2018

HINT:
Please check the release notes carefully BEFORE updating to UCS 4.3-0:
 English version: https://docs.software-univention.de/release-notes-4.3-0-en.html
 German version:  https://docs.software-univention.de/release-notes-4.3-0-de.html

Please also consider documents of following release updates and
3rd party components.

Do you want to continue [Y/n]?
Custom preupdate script /var/lib/local-preup.sh not found
dpkg: Warnung: Die Anforderung, univention-config-wrapper zu entfernen, wird ignoriert; es ist nicht installiert
Checking for space on /var/cache/apt/archives: OK
Checking for space on /boot: OK
Checking for space on /: OK
Checking for package status: OK
Checking LDAP schema: 5bafe64d OVER: Loading Translog Overlay
5bafe64d OVER: db_init
5bafe64d OVER: Configuring Translog Overlay
5bafe64d OVER: Configured Translog Overlay to use file "/var/lib/univention-ldap/listener/listener"
5bafe64d /etc/ldap/slapd.conf: line 227: rootdn is always granted unlimited privileges.
5bafe64d /etc/ldap/slapd.conf: line 235: rootdn is always granted unlimited privileges.
5bafe64d OVER: db_close
5bafe64d OVER: db_destroy
OK
ii  univention-ox-meta-singleserver 9.0.8-15A~4.2.0.201808200915 all          UCS meta package for Open-Xchange
ucrv_on_master:
ox_schema_in_ldap: dn: cn=oxforucs,cn=ldapschema,cn=univention,dc=fs04,dc=ee,dc=hm,dc=edu
cn: oxforucs
objectClass: top
objectClass: univentionLDAPExtensionSchema
objectClass: univentionObjectMetadata
objectClass: univentionObject
univentionOwnedByPackage: univention-ox
univentionObjectType: settings/ldapschema
univentionLDAPSchemaFilename: oxforucs.schema
univentionLDAPSchemaData:: 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
univentionLDAPSchemaActive: TRUE
univentionOwnedByPackageVersion: 9.0.8-1A~4.2.0.20180503
univentionAppIdentifier: oxseforucs_7.8.2-4-ucs2
univentionAppIdentifier: oxseforucs_7.8.2-4-ucs4
univentionAppIdentifier: oxseforucs_7.8.4-ucs2
univentionAppIdentifier: oxseforucs_7.8.4-ucs11

ERROR: The OX Appsuite LDAP schema registration is incorrect.
Aborting the upgrade. For instructions on how to proceed, please refer to
https://help.univention.com/t/9440

Error: Update aborted by pre-update script of release 4.3-0
exitcode of univention-updater: 1
ERROR: update failed. Please check /var/log/univention/updater.log
#9

Hello,

if I see this correctly, this is the problem:

It should say: ucrv_on_master: yes

In comment 4 you have already evaluated the UCR variable ox/master/42/registered_ldap_acls directly. In the test this happens via SSH (for the case where OX is not installed on the DC master). This fails in your case.

As everything seems fine, the solution is to simply disable the check (this is not a “solution” - it does not fix anything, but instead ignores existing problems - other readers: don’t do this unless told to!):

  • ucr set update43/ignore_ox_schema_issue=yes
  • start the upgrade again

But it would be nice, if you could help us understand why this happend. Before starting the upgrade please run (and c&p the output here):

eval "$(univention-config-registry shell)"
univention-ssh /etc/machine.secret ${hostname}\$@$ldap_master /usr/sbin/ucr get ox/master/42/registered_ldap_acls

Thank you and greetings
Daniel

#10

Hi again,

are there any changes made to the SSH UCR variables regarding login on the UCS master?
SSH login only for certain users/groups? Login only via SSH key for all users? or something like that?

Best regards

Sönke

#11

Hi you two,

I changed some UCR variables to only accept certificates for ssh logins.
Output of univention-ssh command shows “Permission denied”.

I didn’t realize that the server needs ssh access to itself.

I’ll try to update with ignore_ox_schema_issue set and get back to you afterwards.

Thanks for your great help!

#12

Hi,

I was finally able to update to 4.3.

Thank you very much!

Greetings,
kreiner

#13

Hi @kreiner,

you’re welcome. And thank you very much for your feedback.

[edit]
I just updated the article https://help.univention.com/t/9440 to cover this case.
[/edit]

Best regards,

Sönke

#14

Hi Sönke,
have this exact error now too, with a rather old system (just one master, no slaves), i wanted to update this weekend.

ERROR: The OX Appsuite LDAP schema registration is incorrect.
Aborting the upgrade. For instructions on how to proceed, please refer to
https://help.univention.com/t/9440

OX is installed and working as expected, but doesn’t show up in the list:

univention-app info
UCS: 4.2-5 errata539
App Center compatibility: 4
Installed: adconnector=11.0 mailserver=11 samba4=4.6

udm settings/ldapschema list --filter="cn=oxforucs*" | egrep 'DN:|active'
DN: cn=oxforucs,cn=ldapschema,cn=univention,dc=foo-bar,dc=de
active: TRUE

egrep ‘^include.*/local-schema/oxforucs’ /etc/ldap/slapd.conf
shows no entries

ucr get ox/master/42/registered_ldap_acls
is empty

the script /usr/share/univention-ox-directory-integration/reregister_ldap_schema.sh does not exist.

Any idea on what i need to do?
thanks
Sascha

#15

Ox is still 7.8.3 btw.

dpkg -l | grep open-xchange
ii  open-xchange                                        7.8.3-56                                       all          The Open-Xchange backend
ii  open-xchange-admin                                  7.8.3-56                                       all          The Open-Xchange backend administration extension
rc  open-xchange-admin-plugin-hosting                   6.20.7.0-15                                    all          Open Xchange Admin Hosting Plugin
ii  open-xchange-admin-soap                             7.8.3-56                                       all          The Open-Xchange administrative SOAP interface
ii  open-xchange-admin-soap-usercopy                    7.8.3-56                                       all          SOAP interface for extension to copy user into other contexts
ii  open-xchange-admin-user-copy                        7.8.3-56                                       all          Extension to copy users into other contexts
ii  open-xchange-appsuite                               7.8.3-46                                       all          OX App Suite HTML5 client
ii  open-xchange-appsuite-backend                       7.8.3-56                                       all          Backend extensions to serve OX App Suite frontend
ii  open-xchange-appsuite-help-common                   7.8.3-46                                       all          Language-independent files of online help for OX App Suite
ii  open-xchange-appsuite-help-de-de                    7.8.3-46                                       all          Online help for OX App Suite (de_DE)
ii  open-xchange-appsuite-help-en-gb                    7.8.3-46                                       all          Online help for OX App Suite (en_GB)
ii  open-xchange-appsuite-help-en-us                    7.8.3-46                                       all          Online help for OX App Suite (en_US)
ii  open-xchange-appsuite-help-es-es                    7.8.3-46                                       all          Online help for OX App Suite (es_ES)
ii  open-xchange-appsuite-help-es-mx                    7.8.3-46                                       all          Online help for OX App Suite (es_MX)
ii  open-xchange-appsuite-help-fr-fr                    7.8.3-46                                       all          Online help for OX App Suite (fr_FR)
ii  open-xchange-appsuite-help-it-it                    7.8.3-46                                       all          Online help for OX App Suite (it_IT)
ii  open-xchange-appsuite-help-ja-jp                    7.8.3-46                                       all          Online help for OX App Suite (ja_JP)
ii  open-xchange-appsuite-help-nl-nl                    7.8.3-46                                       all          Online help for OX App Suite (nl_NL)
ii  open-xchange-appsuite-help-pl-pl                    7.8.3-46                                       all          Online help for OX App Suite (pl_PL)
ii  open-xchange-appsuite-help-zh-cn                    7.8.3-46                                       all          Online help for OX App Suite (zh_CN)
ii  open-xchange-appsuite-help-zh-tw                    7.8.3-46                                       all          Online help for OX App Suite (zh_TW)
ii  open-xchange-appsuite-l10n-ca-es                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (ca_ES)
ii  open-xchange-appsuite-l10n-cs-cz                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (cs_CZ)
ii  open-xchange-appsuite-l10n-da-dk                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (da_DK)
ii  open-xchange-appsuite-l10n-de-de                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (de_DE)
ii  open-xchange-appsuite-l10n-en-gb                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (en_GB)
ii  open-xchange-appsuite-l10n-en-us                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (en_US)
ii  open-xchange-appsuite-l10n-es-es                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (es_ES)
ii  open-xchange-appsuite-l10n-es-mx                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (es_MX)
ii  open-xchange-appsuite-l10n-fi-fi                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (fi_FI)
ii  open-xchange-appsuite-l10n-fr-ca                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (fr_CA)
ii  open-xchange-appsuite-l10n-fr-fr                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (fr_FR)
ii  open-xchange-appsuite-l10n-hu-hu                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (hu_HU)
ii  open-xchange-appsuite-l10n-it-it                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (it_IT)
ii  open-xchange-appsuite-l10n-ja-jp                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (ja_JP)
ii  open-xchange-appsuite-l10n-lv-lv                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (lv_LV)
ii  open-xchange-appsuite-l10n-nb-no                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (nb_NO)
ii  open-xchange-appsuite-l10n-nl-nl                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (nl_NL)
ii  open-xchange-appsuite-l10n-pl-pl                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (pl_PL)
ii  open-xchange-appsuite-l10n-pt-br                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (pt_BR)
ii  open-xchange-appsuite-l10n-ro-ro                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (ro_RO)
ii  open-xchange-appsuite-l10n-ru-ru                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (ru_RU)
ii  open-xchange-appsuite-l10n-sk-sk                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (sk_SK)
ii  open-xchange-appsuite-l10n-sv-se                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (sv_SE)
ii  open-xchange-appsuite-l10n-zh-cn                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (zh_CN)
ii  open-xchange-appsuite-l10n-zh-tw                    7.8.3-46                                       all          Translation of the OX App Suite HTML5 client (zh_TW)
ii  open-xchange-appsuite-manifest                      7.8.3-46                                       all          Manifest and apps included in the OX App Suite HTML5 client
ii  open-xchange-authentication-ucs                     7.8.3-56                                       all          Module for authenticating users on a Univention Corporate Server installation
ii  open-xchange-authorization-standard                 7.8.3-56                                       all          Module implementing the default authorization
ii  open-xchange-calendar-printing                      7.8.3-56                                       all          Extension to render calendar views using templates
ii  open-xchange-client-onboarding                      7.8.3-56                                       all          Open-Xchange on-boarding package
ii  open-xchange-configjump-generic                     7.8.3-56                                       all          Generic implementation providing a URL for the settings Extras link
ii  open-xchange-configjump-generic-gui                 6.22.13-5                                      all          The Open-Xchange generic ConfigJump GUI component
ii  open-xchange-core                                   7.8.3-56                                       all          The essential core of an Open-Xchange backend
ii  open-xchange-dav                                    7.8.3-56                                       all          The Open-Xchange CardDAV and CalDAV implementation
ii  open-xchange-documentconverter                      7.8.3-7                                        all          Document converter client transitional package
ii  open-xchange-documentconverter-api                  7.8.3-7                                        all          The Open-Xchange backend for the documentconverter API
ii  open-xchange-documentconverter-client               7.8.3-7                                        all          The Open-Xchange backend client for the documentconverter web service
ii  open-xchange-documentconverter-server               7.8.3-9                                        amd64        The Open-Xchange backend for the documentconverter web service
ii  open-xchange-documentconverter-webservice           7.8.3-9                                        all          Document converter web service transitional package
ii  open-xchange-documents-backend                      7.8.3-12                                       all          The Open-Xchange documents backend productivity extension
ii  open-xchange-documents-fonts                        1.1.3                                          all          OX Appsuite Documents Fonts
ii  open-xchange-documents-templates                    7.8.3-12                                       all          The Open-Xchange documents templates productivity extension
ii  open-xchange-documents-ui-common                    7.8.3-12                                       all          Common code for all Open-Xchange Documents web applications
ii  open-xchange-documents-ui-editors                   7.8.3-12                                       all          The Open-Xchange Documents editor applications
ii  open-xchange-documents-ui-static                    7.8.3-12                                       all          The Open-Xchange Documents
ii  open-xchange-drive                                  7.8.3-56                                       all          Server module for Open-Xchange Drive file synchronization
ii  open-xchange-drive-client-windows                   7.8.3-56                                       all          New updater for windows drive clients
ii  open-xchange-drive-client-windows-generic           2.2.0-1                                        all          Update data for branded drive clients
ii  open-xchange-drive-comet                            7.8.3-56                                       all          Drive push implementation using Comet and using less system resources
ii  open-xchange-drive-help-common                      2.0.0-2                                        all          Language-independent files of online help for OX Drive
ii  open-xchange-drive-help-de-de                       2.0.0-2                                        all          Online help for OX Drive (de_DE)
ii  open-xchange-drive-help-en-gb                       2.0.0-2                                        all          Online help for OX Drive (en_GB)
ii  open-xchange-drive-help-en-us                       2.0.0-2                                        all          Online help for OX Drive (en_US)
ii  open-xchange-drive-help-es-es                       2.0.0-2                                        all          Online help for OX Drive (es_ES)
ii  open-xchange-drive-help-es-mx                       2.0.0-2                                        all          Online help for OX Drive (es_MX)
ii  open-xchange-drive-help-fr-fr                       2.0.0-2                                        all          Online help for OX Drive (fr_FR)
ii  open-xchange-drive-help-it-it                       2.0.0-2                                        all          Online help for OX Drive (it_IT)
ii  open-xchange-drive-help-ja-jp                       2.0.0-2                                        all          Online help for OX Drive (ja_JP)
ii  open-xchange-drive-help-nl-nl                       2.0.0-2                                        all          Online help for OX Drive (nl_NL)
ii  open-xchange-drive-help-pl-pl                       2.0.0-2                                        all          Online help for OX Drive (pl_PL)
ii  open-xchange-drive-help-zh-cn                       2.0.0-2                                        all          Online help for OX Drive (zh_CN)
ii  open-xchange-drive-help-zh-tw                       2.0.0-2                                        all          Online help for OX Drive (zh_TW)
ii  open-xchange-drive-restricted                       7.8.3-6                                        all          Installs restricted components for Open-Xchange Drive synchronization
ii  open-xchange-eas                                    7.8.3-9                                        all          The Open-Xchange Server EAS Bundle
ii  open-xchange-eas-provisioning-core                  7.8.3-56                                       all          Backend extension to provision synchronization with mobile phones
ii  open-xchange-eas-provisioning-gui                   6.22.13-5                                      all          Open-Xchange UI for EAS provisioning.
ii  open-xchange-eas-provisioning-mail                  7.8.3-56                                       all          EAS provisioning extension to sent provisioning to mobile phones via email
ii  open-xchange-file-distribution                      7.8.3-56                                       all          Cluster wide file distribution
rc  open-xchange-file-storage-config                    6.20.7.0-15                                    all          The Open-Xchange File Storage Config Bundle
rc  open-xchange-folder-json                            6.20.7.0-15                                    all          The Open-Xchange folder JSON interface bundle
ii  open-xchange-freebusy                               7.8.3-56                                       all          Free/Busy module
ii  open-xchange-grizzly                                7.8.3-56                                       all          The Open-Xchange HTTP Server and Servlet Container
ii  open-xchange-guard                                  2.6.0-10                                       all          Guard - the Open-Xchange security solution. This package contains the Guard backend component.
ii  open-xchange-guard-backend-plugin                   2.6.0-10                                       all          OX Guard backend component
ii  open-xchange-guard-file-storage                     2.6.0-10                                       all          OX Guard File Storage
ii  open-xchange-guard-reader                           2.6.0-10                                       all          Guard - the Open-Xchange security solution
ii  open-xchange-guard-ui                               2.6.0-10                                       all          Guard - the Open-Xchange security solution
ii  open-xchange-guard-ui-static                        2.6.0-10                                       all          Guard - the Open-Xchange security solution
ii  open-xchange-gui                                    6.22.13-5                                      all          Package containing the AJAX gui
ii  open-xchange-gui-l10n                               6.22.13-5                                      all          Package containing i18n helper functions
ii  open-xchange-gui-l10n-ca-es                         6.22.13-5                                      all          Package containing translation for ca_ES
ii  open-xchange-gui-l10n-cs-cz                         6.22.13-5                                      all          Package containing translation for cs_CZ
ii  open-xchange-gui-l10n-da-dk                         6.22.13-5                                      all          Package containing translation for da_DK
ii  open-xchange-gui-l10n-de-ch                         6.22.13-5                                      all          Package containing translation for de_CH
ii  open-xchange-gui-l10n-de-de                         6.22.13-5                                      all          Package containing translation for de_DE
ii  open-xchange-gui-l10n-el-gr                         6.22.13-5                                      all          Package containing translation for el_GR
ii  open-xchange-gui-l10n-en-gb                         6.22.13-5                                      all          Package containing translation for en_GB
ii  open-xchange-gui-l10n-en-us                         6.22.13-5                                      all          Package containing translation for en_US
ii  open-xchange-gui-l10n-es-es                         6.22.13-5                                      all          Package containing translation for es_ES
ii  open-xchange-gui-l10n-es-mx                         6.22.13-5                                      all          Package containing translation for es_MX
ii  open-xchange-gui-l10n-eu-es                         6.22.13-5                                      all          Package containing translation for eu_ES
ii  open-xchange-gui-l10n-fr-ca                         6.22.13-5                                      all          Package containing translation for fr_CA
ii  open-xchange-gui-l10n-fr-fr                         6.22.13-5                                      all          Package containing translation for fr_FR
ii  open-xchange-gui-l10n-gl-es                         6.22.13-5                                      all          Package containing translation for gl_ES
ii  open-xchange-gui-l10n-he-he                         6.22.13-5                                      all          Package containing translation for he_HE
ii  open-xchange-gui-l10n-hu-hu                         6.22.13-5                                      all          Package containing translation for hu_HU
ii  open-xchange-gui-l10n-it-it                         6.22.13-5                                      all          Package containing translation for it_IT
ii  open-xchange-gui-l10n-ja-jp                         6.22.13-5                                      all          Package containing translation for ja_JP
ii  open-xchange-gui-l10n-ko-ko                         6.22.13-5                                      all          Package containing translation for ko_KO
ii  open-xchange-gui-l10n-lv-lv                         6.22.13-5                                      all          Package containing translation for lv_LV
ii  open-xchange-gui-l10n-nl-nl                         6.22.13-5                                      all          Package containing translation for nl_NL
ii  open-xchange-gui-l10n-pl-pl                         6.22.13-5                                      all          Package containing translation for pl_PL
ii  open-xchange-gui-l10n-pt-br                         6.22.13-5                                      all          Package containing translation for pt_BR
ii  open-xchange-gui-l10n-pt-pt                         6.22.13-5                                      all          Package containing translation for pt_PT
ii  open-xchange-gui-l10n-ro-ro                         6.22.13-5                                      all          Package containing translation for ro_RO
ii  open-xchange-gui-l10n-ru-ru                         6.22.13-5                                      all          Package containing translation for pt_RU
ii  open-xchange-gui-l10n-sk-sk                         6.22.13-5                                      all          Package containing translation for sk_SK
ii  open-xchange-gui-l10n-sv-se                         6.22.13-5                                      all          Package containing translation for sv_SE
ii  open-xchange-gui-l10n-th-th                         6.22.13-5                                      all          Package containing translation for th_TH
ii  open-xchange-gui-l10n-tr-tr                         6.22.13-5                                      all          Package containing translation for tr_TR
ii  open-xchange-gui-l10n-zh-cn                         6.22.13-5                                      all          Package containing translation for zh_CN
ii  open-xchange-gui-l10n-zh-tw                         6.22.13-5                                      all          Package containing translation for zh_TW
ii  open-xchange-gui-loading-theme-default              6.22.13-5                                      all          Package containing the default loading theme
ii  open-xchange-gui-login-theme-default                6.22.13-5                                      all          Package containing the default login theme
ii  open-xchange-gui-themes-default                     6.22.13-5                                      all          Package containing the default themes
ii  open-xchange-gui-wizard-plugin                      6.22.13-5                                      all          Open-Xchange GUI Wizard Server Plug-In.
ii  open-xchange-gui-wizard-plugin-gui                  6.22.13-5                                      all          Open-Xchange GUI Wizard Plug-In.
ii  open-xchange-halo                                   7.8.3-56                                       all          The Open-Xchange backend halo extension
ii  open-xchange-help-usm-eas                           6.22.13-5                                      all          Open-Xchange OXTender for Business Mobility Help.
rc  open-xchange-http-deferrer                          6.20.7.0-15                                    all          The Open-Xchange Deferrer Servlet
rc  open-xchange-i18n                                   6.20.7.0-15                                    all          The Open-Xchange i18n Bundle
ii  open-xchange-imageserver                            7.8.2-60                                       amd64        The Open-Xchange backend for the imageserver web service
ii  open-xchange-imap                                   7.8.3-56                                       all          The Open-Xchange IMAP Bundle
ii  open-xchange-l10n-ca-es                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for ca_ES
ii  open-xchange-l10n-cs-cz                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for cs_CZ
ii  open-xchange-l10n-da-dk                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for da_DK
ii  open-xchange-l10n-de-ch                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for de_CH
ii  open-xchange-l10n-de-de                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for de_DE
ii  open-xchange-l10n-el-gr                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for el_GR
ii  open-xchange-l10n-en-gb                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for en_GB
ii  open-xchange-l10n-en-us                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for en_US
ii  open-xchange-l10n-es-es                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for es_ES
ii  open-xchange-l10n-es-mx                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for es_MX
ii  open-xchange-l10n-eu-es                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for eu_ES
ii  open-xchange-l10n-fi-fi                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for fi_FI
ii  open-xchange-l10n-fr-ca                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for fr_CA
ii  open-xchange-l10n-fr-fr                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for fr_FR
ii  open-xchange-l10n-gl-es                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for gl_ES
ii  open-xchange-l10n-he-he                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for he_HE
ii  open-xchange-l10n-hi-in                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for hi_IN
ii  open-xchange-l10n-hu-hu                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for hu_HU
ii  open-xchange-l10n-it-it                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for it_IT
ii  open-xchange-l10n-ja-jp                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for ja_JP
ii  open-xchange-l10n-ko-ko                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for ko_KO
ii  open-xchange-l10n-lv-lv                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for lv_LV
ii  open-xchange-l10n-nb-no                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for nb_NO
ii  open-xchange-l10n-nl-nl                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for nl_NL
ii  open-xchange-l10n-pl-pl                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for pl_PL
ii  open-xchange-l10n-pt-br                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for pt_BR
ii  open-xchange-l10n-pt-pt                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for pt_PT
ii  open-xchange-l10n-ro-ro                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for ro_RO
ii  open-xchange-l10n-ru-ru                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for ru_RU
ii  open-xchange-l10n-sk-sk                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for sk_SK
ii  open-xchange-l10n-sv-se                             7.8.3-56                                       all          Package containing Open-Xchange backend localization for sv_SE
ii  open-xchange-l10n-tr-tr                             7.8.3-56                                       all          Package
[...]
#16

OX should be updated to 7.8.4-ucs12 (oxseforucs_20181112141211) first.
Check the UCR repository settings → sources.list.d/20_... and try univention-app register ....

Mastodon