Tuxedo Linux Support for Domain Join?

Linux Clients
#1

Hey,

i use Tuxedo Linux on our Machines, cause sometimes we use Features of this.

May you add Tuxedo to supported Systems for Univention Domain Add?

Thanks

Domain Join Issues - UCS5.0-8 - Automation via. Ansible
#2

Hey,

Tuxedo OS is based on Ubuntu, right? Have you tried to use the domain join and discovered any issues?

Regards
Jan-Luca

#3

Hey,

yes, its ubuntu based.

I get this error:
Bildschirmfoto_20240808_103332

Thanks

#4

Ah, I see the problem. The script does indeed check the distribution via lsb_release: https://github.com/univention/univention-domain-join/blob/5ca95dc87f9576d5adf40b15addeabb51e2240cf/univention_domain_join/utils/distributions.py#L8

You could try the following:

  1. Find out your distributions name via lsb_release -is (from the error this seems to be Tuxedo)
  2. Create a “distribution joiner” by copying to the one of Ubuntu, using the name you got before as the filename (in lowercase): sudo cp /usr/lib/python3/dist-packages/univention_domain_join/distributions/{ubuntu,tuxedo}.py

That should, from a quick look at the code, at least try to join. There might be issues when joining because of differences between Tuxedo and Ubuntu, but it may just work like this.

2 Likes
#5

Hi,

i tried and get the new Error:
2024-08-28_10-43

Here is the Log:

2024-08-28 10:42:31,393 userinfo WARNING Warning: /etc/krb5.conf already exists.
2024-08-28 10:42:31,394 userinfo INFO Created a backup of all configuration files, that will be modified at '/var/univention-backup/20240828084231_domain-join'.
2024-08-28 10:42:32,041 userinfo INFO Getting the DN of the Administrator 
2024-08-28 10:42:33,321 userinfo INFO Downloading the UCS root certificate to /etc/univention/ssl/ucsCA/CAcert.pem
2024-08-28 10:42:33,340 userinfo INFO Adding the UCS root certificate to the certificate store
2024-08-28 10:42:37,137 userinfo INFO Adding LDAP entry for this machine on the UCS DC
2024-08-28 10:42:38,077 userinfo CRITICAL Adding an LDAP object for this computer didn't work.
2024-08-28 10:42:38,077 userinfo CRITICAL Warning: Permanently added '10.0.0.20' (ED25519) to the list of known hosts.
E: Object exists: (uid) The username is already in use as username or as groupname: Corin-II$.

2024-08-28 10:42:38,641 userinfo CRITICAL 
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention_domain_join/join_steps/ldap_configurator.py", line 78, in modify_old_entry_or_add_machine_to_ldap
    udm_type, dn = get_machines_udm(dc_ip, admin_username, admin_pw, admin_dn)
  File "/usr/lib/python3/dist-packages/univention_domain_join/utils/ldap.py", line 77, in get_machines_udm
    raise LookupError(dc_ip)
LookupError: 10.0.0.20

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/sbin/univention-domain-join", line 458, in run
    distribution_joiner.join_domain()
  File "/usr/lib/python3/dist-packages/univention_domain_join/distributions/tuxedo.py", line 115, in join_domain
    LdapConfigurator().configure_ldap(self.dc_ip, self.ldap_server_name, self.admin_username, self.admin_pw, self.ldap_base, admin_dn)
  File "/usr/lib/python3/dist-packages/univention_domain_join/join_steps/ldap_configurator.py", line 72, in configure_ldap
    self.modify_old_entry_or_add_machine_to_ldap(password, dc_ip, admin_username, admin_pw, ldap_base, admin_dn)
  File "/usr/lib/python3/dist-packages/univention_domain_join/join_steps/ldap_configurator.py", line 81, in modify_old_entry_or_add_machine_to_ldap
    dn = self.add_machine_to_ldap(password, dc_ip, admin_username, admin_pw, ldap_base, admin_dn)
  File "/usr/lib/python3/dist-packages/univention_domain_join/join_steps/ldap_configurator.py", line 133, in add_machine_to_ldap
    raise LdapConfigutationException()
univention_domain_join.join_steps.ldap_configurator.LdapConfigutationException

i also tried with dns hostname, but the program cant resolve it. i tested with dns entries in my hosts file, but if wont work too
2024-08-28_10-46

Thanks

#6

Try to go to UCS and remove any previous computers called Corin-II.

#7

Ok

i did it.After delete the computer i have to create the ldap folder in /etc. After this it succeed. So i rebooted and tried to login with my domain user and… it fails. i tried username username@domain domain/username. nothing :confused:

image

2024-08-29_07-12

#8

Not sure why you had to create the LDAP folder in the /etc (and I’m assuming this was on the client machine).

Have you read this and all of the additional references?

If you’d search this forum, you might have come across this

Hope that helps

Mastodon