Univention-run-join-scripts schlägt fehl bei Open Xchange

Apps & App Center
#1

Hallo,

wir wollten von Zarafa umsteigen auf Open Xchange. Dabei haben wir die Zarafa module über das AppCenter deinstalliert und danach die Open Xchange module installiert. Dies wurde über die univention-management-console ohne fehler durchgeführt. Nach der Installation sollte univention-run-join-scripts ausgeführt werden. Dabei kam folgender fehler:

[code]root@ucs:~# univention-run-join-scripts
univention-run-join-scripts: runs all join scripts existing on local computer.
copyright © 2001-2016 Univention GmbH, Germany

Running 01univention-ldap-server-init.inst skipped (already executed)
Running 02univention-directory-notifier.inst skipped (already executed)
Running 03univention-directory-listener.inst skipped (already executed)
Running 04univention-ldap-client.inst skipped (already executed)
Running 05univention-bind.inst skipped (already executed)
Running 08univention-apache.inst skipped (already executed)
Running 10univention-ldap-server.inst skipped (already executed)
Running 11univention-heimdal-init.inst skipped (already executed)
Running 11univention-pam.inst skipped (already executed)
Running 12privacyidea.inst skipped (already executed)
Running 15univention-directory-notifier-post.inst skipped (already executed)
Running 15univention-heimdal-kdc.inst skipped (already executed)
Running 18python-univention-directory-manager.inst skipped (already executed)
Running 20univention-directory-policy.inst skipped (already executed)
Running 20univention-join.inst skipped (already executed)
Running 25univention-dhcp.inst skipped (already executed)
Running 26univention-nagios-common.inst skipped (already executed)
Running 28univention-icinga.inst skipped (already executed)
Running 28univention-nagios-server.inst skipped (already executed)
Running 30univention-appcenter.inst skipped (already executed)
Running 30univention-corporate-client-schema.inst skipped (already executed)
Running 30univention-nagios-client.inst skipped (already executed)
Running 31univention-nagios-ad-connector.inst skipped (already executed)
Running 31univention-nagios-libvirtd-kvm.inst skipped (already executed)
Running 31univention-nagios-s4-connector.inst skipped (already executed)
Running 31univention-nagios-uvmmd.inst skipped (already executed)
Running 34univention-management-console-server.inst skipped (already executed)
Running 34univention-self-service.inst skipped (already executed)
Running 35ucc-umc-images.inst skipped (already executed)
Running 35ucc-umc-setup.inst skipped (already executed)
Running 35univention-appcenter-docker.inst skipped (already executed)
Running 35univention-management-console-module-adconnector.skipped (already executed)
Running 35univention-management-console-module-adtakeover.iskipped (already executed)
Running 35univention-management-console-module-appcenter.inskipped (already executed)
Running 35univention-management-console-module-diagnostic.iskipped (already executed)
Running 35univention-management-console-module-ipchange.insskipped (already executed)
Running 35univention-management-console-module-join.inst skipped (already executed)
Running 35univention-management-console-module-klms.inst skipped (already executed)
Running 35univention-management-console-module-lib.inst skipped (already executed)
Running 35univention-management-console-module-mrtg.inst skipped (already executed)
Running 35univention-management-console-module-passwordchanskipped (already executed)
Running 35univention-management-console-module-pkgdb.inst skipped (already executed)
Running 35univention-management-console-module-printers.insskipped (already executed)
Running 35univention-management-console-module-quota.inst skipped (already executed)
Running 35univention-management-console-module-reboot.inst skipped (already executed)
Running 35univention-management-console-module-services.insskipped (already executed)
Running 35univention-management-console-module-setup.inst skipped (already executed)
Running 35univention-management-console-module-sysinfo.instskipped (already executed)
Running 35univention-management-console-module-top.inst skipped (already executed)
Running 35univention-management-console-module-ucr.inst skipped (already executed)
Running 35univention-management-console-module-udm.inst skipped (already executed)
Running 35univention-management-console-module-updater.instskipped (already executed)
Running 35univention-nagios-cups.inst skipped (already executed)
Running 35univention-nagios-dansguardian.inst skipped (already executed)
Running 35univention-nagios-squid.inst skipped (already executed)
Running 35univention-self-service-passwordreset-umc.inst skipped (already executed)
Running 36univention-management-console-module-apps.inst skipped (already executed)
Running 38univention-management-console-module-oxldb.inst skipped (already executed)
Running 40univention-postgresql.inst skipped (already executed)
Running 40univention-virtual-machine-manager-schema.inst skipped (already executed)
Running 43univention-virtual-machine-manager-node-common.inskipped (already executed)
Running 44univention-virtual-machine-manager-daemon.inst skipped (already executed)
Running 44univention-virtual-machine-manager-node-kvm.inst skipped (already executed)
Running 45univention-management-console-module-uvmm.inst skipped (already executed)
Running 50univention-pkgdb.inst skipped (already executed)
Running 51univention-ad-connector-exchange.inst skipped (already executed)
Running 62univention-bareos.inst skipped (already executed)
Running 65univention-ox.inst failed (exitcode: 1)
Running 67univention-mail-server.inst skipped (already executed)
Running 70iiiiiii4ucs-123.inst skipped (already executed)
Running 71iiiiiii4ucs-udm.inst skipped (already executed)
Running 78univention-kde.inst skipped (already executed)
Running 79univention-printserver.inst skipped (already executed)
Running 79univention-squid.inst skipped (already executed)
Running 80owncloud.inst skipped (already executed)
Running 80univention-radius.inst skipped (already executed)
Running 81univention-ad-connector.inst skipped (already executed)
Running 81univention-nfs-server.inst skipped (already executed)
Running 82univention-mail-dovecot.inst skipped (already executed)
Running 90univention-bind-post.inst skipped (already executed)
Running 91ucc-pxe-boot.inst skipped (already executed)
Running 91univention-saml.inst skipped (already executed)
Running 92plucs.inst skipped (already executed)
Running 92univention-management-console-web-server.inst skipped (already executed)
Running 94univention-openvpn-master.inst skipped (already executed)
Running 94univention-openvpn-server.inst skipped (already executed)
Running 94univention-openvpn-sitetosite.inst skipped (already executed)
Running 95ucc-2.1-thinclient-image.img.inst skipped (already executed)
Running 96univention-samba4.inst skipped (already executed)
Running 97univention-s4-connector.inst skipped (already executed)
Running 98univention-pkgdb-tools.inst skipped (already executed)
Running 98univention-samba4-dns.inst skipped (already executed)
[/code]

Wir hatten dann nach resten der Zarafa-Installation gesucht und diese dann mit apt-get purge zarafa* gelöscht. Dabei wurde darauf geachtet das nur Zarafa eigene Packete deinstalliert wurden. Da dies nicht half reinstallierten wir Opene Xchange erneut, jedoch blieb der fehler.
Die momentan installierte Version von UCS ist 4.1-1 errata116.
Alle Pakete sind aktuell.

MFG

Daniel Fischer

#2

Hallo,

das log des join-Vorganges, in dem die Fehlermeldung zu sehen ist, ist /var/log/univention/join.log - bitte schauen Sie da rein um zu sehen was das Problem verursacht.

Grüße
Daniel Tröder

#3

Hallo,

das log zeigt folgendes:

[code]univention-run-join-scripts started
Di 23. Feb 18:04:51 CET 2016

RUNNING 01univention-ldap-server-init.inst
EXITCODE=already_executed
RUNNING 02univention-directory-notifier.inst
EXITCODE=already_executed
RUNNING 03univention-directory-listener.inst
EXITCODE=already_executed
RUNNING 04univention-ldap-client.inst
EXITCODE=already_executed
RUNNING 05univention-bind.inst
EXITCODE=already_executed
RUNNING 08univention-apache.inst
EXITCODE=already_executed
RUNNING 10univention-ldap-server.inst
EXITCODE=already_executed
RUNNING 11univention-heimdal-init.inst
EXITCODE=already_executed
RUNNING 11univention-pam.inst
EXITCODE=already_executed
RUNNING 12privacyidea.inst
EXITCODE=already_executed
RUNNING 15univention-directory-notifier-post.inst
EXITCODE=already_executed
RUNNING 15univention-heimdal-kdc.inst
EXITCODE=already_executed
RUNNING 18python-univention-directory-manager.inst
EXITCODE=already_executed
RUNNING 20univention-directory-policy.inst
EXITCODE=already_executed
RUNNING 20univention-join.inst
EXITCODE=already_executed
RUNNING 25univention-dhcp.inst
EXITCODE=already_executed
RUNNING 26univention-nagios-common.inst
EXITCODE=already_executed
RUNNING 28univention-icinga.inst
EXITCODE=already_executed
RUNNING 28univention-nagios-server.inst
EXITCODE=already_executed
RUNNING 30univention-appcenter.inst
EXITCODE=already_executed
RUNNING 30univention-corporate-client-schema.inst
EXITCODE=already_executed
RUNNING 30univention-nagios-client.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-ad-connector.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-libvirtd-kvm.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-s4-connector.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-uvmmd.inst
EXITCODE=already_executed
RUNNING 34univention-management-console-server.inst
EXITCODE=already_executed
RUNNING 34univention-self-service.inst
EXITCODE=already_executed
RUNNING 35ucc-umc-images.inst
EXITCODE=already_executed
RUNNING 35ucc-umc-setup.inst
EXITCODE=already_executed
RUNNING 35univention-appcenter-docker.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-adconnector.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-adtakeover.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-appcenter.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-diagnostic.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ipchange.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-join.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-klms.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-lib.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-mrtg.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-passwordchange.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-pkgdb.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-printers.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-quota.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-reboot.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-services.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-setup.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-sysinfo.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-top.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ucr.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-udm.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-updater.inst
EXITCODE=already_executed
RUNNING 35univention-nagios-cups.inst
EXITCODE=already_executed
RUNNING 35univention-nagios-dansguardian.inst
EXITCODE=already_executed
RUNNING 35univention-nagios-squid.inst
EXITCODE=already_executed
RUNNING 35univention-self-service-passwordreset-umc.inst
EXITCODE=already_executed
RUNNING 36univention-management-console-module-apps.inst
EXITCODE=already_executed
RUNNING 38univention-management-console-module-oxldb.inst
EXITCODE=already_executed
RUNNING 40univention-postgresql.inst
EXITCODE=already_executed
RUNNING 40univention-virtual-machine-manager-schema.inst
EXITCODE=already_executed
RUNNING 43univention-virtual-machine-manager-node-common.inst
EXITCODE=already_executed
RUNNING 44univention-virtual-machine-manager-daemon.inst
EXITCODE=already_executed
RUNNING 44univention-virtual-machine-manager-node-kvm.inst
EXITCODE=already_executed
RUNNING 45univention-management-console-module-uvmm.inst
EXITCODE=already_executed
RUNNING 50univention-pkgdb.inst
EXITCODE=already_executed
RUNNING 51univention-ad-connector-exchange.inst
EXITCODE=already_executed
RUNNING 62univention-bareos.inst
EXITCODE=already_executed
RUNNING 65univention-ox.inst
2016-02-23 18:04:55.105371113+01:00 (in joinscript_init)
Object exists: cn=ldapschema,cn=univention,dc=xyz,dc=server
INFO: No change of core data of object oxforucs.
Object exists: cn=ldapacl,cn=univention,dc=xyz,dc=server
INFO: No change of core data of object 66oxforucs.
Object exists: cn=udm_syntax,cn=univention,dc=xyz,dc=server
INFO: No change of core data of object 50_ox.
Object exists: cn=udm_hook,cn=univention,dc=xyz,dc=server
INFO: No change of core data of object oxAccess.
INFO: No change of core data of object oxGroupHook.
No modification: cn=oxforucs,cn=ldapschema,cn=univention,dc=xyz,dc=server

WARNING: cannot append oxseforucs_7.6.2-25-ucs1 to appidentifier, value exists
No modification: cn=oxforucs,cn=ldapschema,cn=univention,dc=xyz,dc=server

No modification: cn=66oxforucs,cn=ldapacl,cn=univention,dc=xyz,dc=server

WARNING: cannot append oxseforucs_7.6.2-25-ucs1 to appidentifier, value exists
No modification: cn=66oxforucs,cn=ldapacl,cn=univention,dc=xyz,dc=server

No modification: cn=50_ox,cn=udm_syntax,cn=univention,dc=xyz,dc=server

WARNING: cannot append oxseforucs_7.6.2-25-ucs1 to appidentifier, value exists
No modification: cn=50_ox,cn=udm_syntax,cn=univention,dc=xyz,dc=server

No modification: cn=oxAccess,cn=udm_hook,cn=univention,dc=xyz,dc=server

WARNING: cannot append oxseforucs_7.6.2-25-ucs1 to appidentifier, value exists
No modification: cn=oxAccess,cn=udm_hook,cn=univention,dc=xyz,dc=server

No modification: cn=oxGroupHook,cn=udm_hook,cn=univention,dc=xyz,dc=server

WARNING: cannot append oxseforucs_7.6.2-25-ucs1 to appidentifier, value exists
No modification: cn=oxGroupHook,cn=udm_hook,cn=univention,dc=xyz,dc=server

Waiting for activation of the extension object oxforucs:…ERROR: Master did not mark the extension object active within 180 seconds.
ERROR
ucs_registerLDAPExtension: registraton of /usr/share/univention-ox/ldap/oxforucs.schema failed.
65univention-ox.inst: Failed to register LDAP module.
EXITCODE=1
RUNNING 67univention-mail-server.inst
EXITCODE=already_executed
RUNNING 70iiiiiii4ucs-123.inst
EXITCODE=already_executed
RUNNING 71iiiiiii4ucs-udm.inst
EXITCODE=already_executed
RUNNING 78univention-kde.inst
EXITCODE=already_executed
RUNNING 79univention-printserver.inst
EXITCODE=already_executed
RUNNING 79univention-squid.inst
EXITCODE=already_executed
RUNNING 80owncloud.inst
EXITCODE=already_executed
RUNNING 80univention-radius.inst
EXITCODE=already_executed
RUNNING 81univention-ad-connector.inst
EXITCODE=already_executed
RUNNING 81univention-nfs-server.inst
EXITCODE=already_executed
RUNNING 82univention-mail-dovecot.inst
EXITCODE=already_executed
RUNNING 90univention-bind-post.inst
EXITCODE=already_executed
RUNNING 91ucc-pxe-boot.inst
EXITCODE=already_executed
RUNNING 91univention-saml.inst
EXITCODE=already_executed
RUNNING 92plucs.inst
EXITCODE=already_executed
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 94univention-openvpn-master.inst
EXITCODE=already_executed
RUNNING 94univention-openvpn-server.inst
EXITCODE=already_executed
RUNNING 94univention-openvpn-sitetosite.inst
EXITCODE=already_executed
RUNNING 95ucc-2.1-thinclient-image.img.inst
EXITCODE=already_executed
RUNNING 96univention-samba4.inst
EXITCODE=already_executed
RUNNING 97univention-s4-connector.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed
RUNNING 98univention-samba4-dns.inst
EXITCODE=already_executed

Di 23. Feb 18:08:01 CET 2016
univention-run-join-scripts finished

[/code]

Außerdem habe ich eben festgestellt das in der “Univention Configuration Registry” noch jede menge Zarafa Einträge zu finden sind.

[ul]ldap/index/eq
security/packetfilter/PACKAGE/zarafa4ucs/tcp/*
zarafa/cfg/gateway/*
zarafa/cfg/ical/*
zarafa/cfg/ldap.propmap/*
zarafa/cfg/ldap/*
zarafa/cfg/server/*
zarafa/default/*
zmeetings/plugin*[/ul]

Ist jetzt die Frage ob ich diese bedenkenlos löschen kann?
Vielen dank für ihr Bemühen!

MFG Daniel Fischer

#4

Ich vermute es sind von Zarafa für OX inkompatible LDAP Schemata installiert. Bitte führen Sie folgendes aus um die Konsistenz der aktuell installierten Schemata zu testen:

slapschema -b $(ucr get ldap/base)
#5

Hallo,

root@ucs:~# slapschema -b $(ucr get ldap/base) 56cdd116 OVER: Loading Translog Overlay 56cdd116 OVER: db_init 56cdd116 OVER: Configuring Translog Overlay 56cdd116 OVER: Configured Translog Overlay to use file "/var/lib/univention-ldap/listener/listener" 56cdd116 OVER: db_close 56cdd116 OVER: db_destroy

MFG

#6

Es gibt diverse Gründe warum das Hinzufügen eines neuen LDAP-Schemas fehlschlagen könnte.

Zwei Fragen zuerst:
Versuchen Sie OX auf einem Master oder einer anderen Systemrolle zu installieren?

ucr get server/role

Läuft der listener auf dem Master?

ps ax | grep univention-directory-listener

Ein Versuch eine etwas aussagekräftigere Fehlermeldung zu bekommen wäre das händische Einbinden des OX-Schemas auf dem Master:
Zuerst überprüfen, dass es installiert ist:

ls -l /usr/share/univention-ox/ldap/oxforucs.schema

Nun Schema zu OpenLDAP hinzufügen:

[code]echo “include /usr/share/univention-ox/ldap/oxforucs.schema” >> /etc/ldap/slapd.conf
invoke-rc.d slapd restart

Fehlermeldung?[/code]

Anschließend wieder die ursprüngliche Konfiguration herstellen:

ucr commit /etc/ldap/slapd.conf invoke-rc.d slapd restart

Gruß
Daniel Tröder

#7

hi,

[code]root@ucs:~# ucr get server/role
domaincontroller_master
root@ucs:~# ps ax | grep univention-directory-listener
3210 ? Ss 0:03 runsv univention-directory-listener
29918 pts/0 S+ 0:00 grep univention-directory-listener
root@ucs:~# ls -l /usr/share/univention-ox/ldap/oxforucs.schema
-rw-r–r-- 1 root root 26916 Mär 27 2014 /usr/share/univention-ox/ldap/oxforucs.schema
root@ucs:~# echo “include /usr/share/univention-ox/ldap/oxforucs.schema” >> /etc/ldap/slapd.conf
root@ucs:~# invoke-rc.d slapd restar
Usage: /etc/init.d/slapd {start|stop|restart|force-stop|crestart|graceful-stop|graceful-restart}
invoke-rc.d: initscript slapd, action “restar” failed.
root@ucs:~# invoke-rc.d slapd restart
[info] Restarting ldap server(s).
[ ok ] Stopping ldap server(s): slapd …done.
[FAIL] Starting ldap server(s): slapd …failed.
[info] 56cf2a8c OVER: Loading Translog Overlay 56cf2a8c OVER: db_init 56cf2a8c OVER: Configuring Translog Overlay 56cf2a8c OVER: Configured Translog Overlay to use file “/var/lib/univention-ldap/listener/listener” 56cf2a8c /usr/share/univention-ox/ldap/oxforucs.schema: line 5 attributetype: Duplicate attributeType: “1.3.6.1.4.1.31353.2.2.1” slapschema: bad configuration file!.
root@ucs:~# ucr commit /etc/ldap/slapd.conf
Multifile: /etc/ldap/slapd.conf
root@ucs:~# invoke-rc.d slapd restart
[info] Restarting ldap server(s).
[ ok ] Stopping ldap server(s): slapd …done.
[ ok ] Starting ldap server(s): slapd …done.
[ ok ] Checking Schema ID: …done.

[/code]

Die ersten Zeilen der /usr/share/univention-ox/ldap/oxforucs.schema:

attributetype ( 1.3.6.1.4.1.31353.2.2.1 NAME ( 'oxBirthday' )
        DESC 'oxBirthday'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.31353.2.2.2 NAME ( 'oxNumOfChildren' )
        DESC 'oxNumOfChildren'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
#8

Hallo,

das Schema war anscheinend schon eingebunden, daher “Duplicate attributeType”. Das Problem kommt aber daher, dass der listener nicht läuft:

[quote=“lindico”]root@ucs:~# ps ax | grep univention-directory-listener 3210 ? Ss 0:03 runsv univention-directory-listener 29918 pts/0 S+ 0:00 grep univention-directory-listener[/quote]
“runsv” startet und überwacht den univention-directory-listener nur - ist er nicht selbst. Bitte starten Sie den listener…

invoke-rc.d univention-directory-listener restart

Es sollte nun einen zusätzlichen Prozess geben:

root@Test35:~# ps ax | grep univention-directory-listener 2328 ? Ss 0:00 runsv univention-directory-listener 4925 ? S 0:00 /usr/sbin/univention-directory-listener -F -b dc=Uni,dc=Dtr -m /usr/lib/univention-directory-listener/system -c /var/lib/univention-directory-listener -d 2 -x -ZZ -D cn=admin,dc=Uni,dc=Dtr -y /etc/ldap.secret 4948 pts/0 S+ 0:00 grep univention-directory-listener
… und versuchen Sie die Ausführung des join-Skriptes noch einmal:

univention-run-join-scripts
#9

Haalo,

es scheint ein problem mit den univention-directory-listener zu geben.

root@ucs:~# invoke-rc.d univention-directory-listener restart
[info] Restarting univention-directory-listener daemon.
timeout: finish: univention-directory-listener: (pid 10032) 35s, normally down
done.
root@ucs:~# ps ax | grep univention-directory-listener
 3179 ?        Ss     0:00 runsv univention-directory-listener
11933 pts/1    S+     0:00 grep univention-directory-listener

Das Join-script funktioniert dann natürlich auch nicht.

MFG

#10

Was steht denn in der Datei /var/log/univention/listener.log?

Mastodon