Problem: Joinscript 92univention-management-console-web-server.inst fails with metadata download

[scheinig]

Problem:

While running univention-join the joinscript 92univention-management-console-web-server.inst fails during metadata download with:
curl: (51) SSL: no alternative certificate subject name matches target host name ‘ucs-sso.schein.me’

Investigation:

This can happen, if you have changed the ucs-sso login to an alternative name. Like it is described here:

Problem: Changing ucs-sso login from master.schein.sun to portal.schein.sun

Problem: How can I make the registration at the UMC for SSO available on an alternate name. E.g changing ucs-sso login on the UMC from master.schein.sun to portal.schein.sun This was tested for a singlemaster environment Solution: Assuming that a certificate for portal.schein.sun already exists… This way: (Can also be the alternate name in the UCS certificate) … and this is stored under /etc/univention/ssl/portal.schein.sun, these two further steps still necessary Or this way: Or …

Solution:

If you have not set “ucs/server/sso/fqdn” on each domain controller server, this can be the cause of the failure.
So set ucs/server/sso/fqdn to the alternative name for ucs-sso.
e.g.
ucr set ucs/server/sso/fqdn='portal.schein.me'