Upgrade to UCS 5 fail

hi,
i have some error when i want update UCS:

Checking minimum_ucs_version_of_all_systems_in_domain ... FAIL
Checking python_ucr_template_compatibility ...    FAIL

python_ucr_template_compatibility:
The following UCR templates are not compatible with Python 3:
         /etc/univention/templates/files/etc/ssh/sshd_config (package: univention-base-files)

minimum_ucs_version_of_all_systems_in_domain:
The following extensions are incompatible with UCS 5.0:
        cn=guacamole,cn=udm_syntax,cn=univention,dc=ldi,dc=intranet: [unspecified..unspecified)
        cn=guacamole/config,cn=udm_module,cn=univention,dc=ldi,dc=intranet: [unspecified..unspecified)

i uninstall guacamole

1 Like

Hi there! You could try the following:

  1. backup
  2. move /etc/univention/templates/files/etc/ssh/sshd_config elsewhere
  3. clean up LDAP from the command line:

ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=guacamole,cn=udm_syntax,cn=univention,dc=ldi,dc=intranet‚ÄĚ

ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=guacamole/config,cn=udm_module,cn=univention,dc=ldi,dc=intranet‚ÄĚ

  1. retry to upgrade

cheers

Hello and thank you, it works for the ‚Äússh‚ÄĚ file, but I have an error for ‚Äúguacamole‚ÄĚ:

ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=guacamole,cn=udm_syntax,cn=univention,dc=ldi,dc=intranet‚ÄĚ
ldap_bind: Invalid DN syntax (34)
        additional info: invalid DN
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=guacamole/config,cn=udm_module,cn=univention,dc=ldi,dc=intranet‚ÄĚ
ldap_bind: Invalid DN syntax (34)
        additional info: invalid DN

Hello,

i think, there are still config-files of guacamole there.
You could give

univention-remove --purge guacamole

a try.

hth

Hello, I have already tried this command but it does not work.

Le paquet ¬ę guacamole ¬Ľ n'est pas install√©, et ne peut donc √™tre supprim√©
0 mis à jour, 0 nouvellement installés, 0 à enlever et 0 non mis à jour.

You copy & pasted the wrong content. Use regular double quotes (") instead of ( “)

1 Like

There were still images of guacamole in Docker. I remove it. but it didn’t change anything. I still have the same error.

The system can not be updated to UCS 5.0 due to the following reasons:

minimum_ucs_version_of_all_systems_in_domain:
The following extensions are incompatible with UCS 5.0:
        cn=guacamole,cn=udm_syntax,cn=univention,dc=ldi,dc=intranet: [unspecified..unspecified)
        cn=guacamole/config,cn=udm_module,cn=univention,dc=ldi,dc=intranet: [unspecified..unspecified)

hello, i use the button </> . it is not correct ?

Retry again with:

ldapdelete -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret "cn=guacamole,cn=udm_syntax,cn=univention,dc=ldi,dc=intranet"

ldapdelete -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret "cn=guacamole/config,cn=udm_module,cn=univention,dc=ldi,dc=intranet"

thank you very much, the update is in progress…

Hi,
I have the same problem but with OX and other extensions:

cn=58univention-fetchmail-schema,cn=ldapacl,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=66oxforucs,cn=ldapacl,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=50_ox,cn=udm_syntax,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxAccess,cn=udm_hook,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxContextRW,cn=udm_hook,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxGroupHook,cn=udm_hook,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxUserDefaults,cn=udm_hook,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxmail/oxcontext,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxmail/oxdomain,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxmail/oxfetchmailmulti,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified) cn=oxmail/oxfetchmailsingle,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified) cn=oxmail/oxfolder,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxmail/oxlists,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=oxmail/oxmail,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified) cn=oxresources/oxresources,cn=udm_module,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=63openvpn-sitetosite,cn=ldapacl,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=univention-openvpn-schema,cn=udm_syntax,cn=univention,dc=heg,dc=int: [unspecified…unspecified)
cn=univention-openvpn,cn=udm_hook,cn=univention,dc=heg,dc=int: [unspecified…unspecified)

Using your command:

ldapdelete -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret "cn=58univention-fetchmail-schema,cn=ldapacl,cn=univention,dc=heg,dc=int"

 I get the system response:

bash: ucr: Kommando nicht gefunden
ldap_bind: Invalid DN syntax (34)
  additional info: invalid DN

Any help would be great.

Make sure you are logged in as root user.

Trying to log in as root:

Login as root is not allowed

Logged in as Administrator with root pw possible.

Performing sudo ldapdelete results in the same response:

bash: ucr: Kommando nicht gefunden
ldap_bind: Invalid DN syntax (34)
additional info: invalid DN

I assume the command/ script ucr can not be found on the system. How to repair ?

If you can’t login as root you should execute sudo su when being logged in as Administrator:

The UCR binary has to exists, please do:

# ls -l /usr/sbin/ucr
lrwxrwxrwx 1 root root 26 Mär 17 09:34 /usr/sbin/ucr -> univention-config-registry

Hello
I would like to upgrade from 4.8 to 5.0
I got the Same Message


SSH

univention-upgrade --ignoressh --ignoreterm

Do you want to continue [Y/n]? y

Checking adc_mapping … OK
Checking adc_multiinstance_mapping … OK
Checking architecture … OK
Checking blocking_apps … OK
Checking default_master_packages … OK
Checking disk_space … OK
Checking failed_ldif … OK
Checking for_postgresql94 … OK
Checking hold_packages … OK
Checking kernel … OK
Checking kolab_schema … OK
Checking ldap_connection … OK
Checking ldap_schema … OK
Checking legacy_objects … OK
Checking master_version … OK
Checking md5_signature_is_used … OK
Checking min_version … OK
Checking minimum_ucs_version_of_all_systems_in_domain … FAIL
Checking old_packages … OK
Checking overwritten_umc_templates … OK
Checking ox_schema … OK
Checking package_status … OK
Checking python_ucr_template_compatibility … minimum_ucs_version_of_all_systems_in_domain … FAILOK
Checking python_ucsschool_import_hook_compatibility … OK
Checking role_package_removed … OK
Checking samba_server_schannel … OK
Checking samba_tdb_size … OK
Checking slapd_on_member … OK
Checking ssh … OK
Checking system_date_too_old … OK
Checking system_role … OK
Checking term … OK
Checking tls_public_key_size … OK
Checking tls_public_key_size_ucs-sso … OK
Checking usr_mountpoint … OK
Checking valid_machine_credentials … OK

The system can not be updated to UCS 5.0 due to the following reasons:

minimum_ucs_version_of_all_systems_in_domain:
The following extensions are incompatible with UCS 5.0:
cn=62univention-portal,cn=ldapacl,cn=univention,dc=dom,dc=stone: [unspecified…unspecified)
cn=univention-portal,cn=udm_syntax,cn=univention,dc=dom,dc=stone: [unspecified…unspecified)
cn=portals/portal,cn=udm_module,cn=univention,dc=dom,dc=stone: [4.4-1…unspecified)
cn=portals/category,cn=udm_module,cn=univention,dc=dom,dc=stone: [4.4-1…unspecified)
cn=portals/entry,cn=udm_module,cn=univention,dc=dom,dc=stone: [4.4-1…unspecified)
cn=portals/folder,cn=udm_module,cn=univention,dc=dom,dc=stone: [4.4-1…unspecified)
cn=portals/all,cn=udm_module,cn=univention,dc=dom,dc=stone: [4.4-1…unspecified)

Error: Please check ‚Äú/var/log/univention/updater.log‚ÄĚ for details.
ERROR: update failed. Please check /var/log/univention/updater.log


I tryed

ldapdelete -x -D ‚Äúcn=62univention-portal,cn=ldapacl,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=univention-portal,cn=udm_syntax,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=portals/portal,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=portals/category,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=portals/entry,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=portals/folder,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=portals/all,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ

Than i got back this message

ldap_bind: Server is unwilling to perform (53)
** additional info: unauthenticated bind (DN with no password) disallowed**


Please help me thank you

No Ideas

I am not able to Update to Version 5

Is your UCS still functional otherwise? System diagnostic OK? Anything else to chew on in updater.log?

I wonder if the issue is with some parameters missing in the ldapdelete command. Try like so.

# ldapdelete -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret ‚Äúcn=62univention-portal,cn=ldapacl,cn=univention,dc=dom,dc=stone‚ÄĚ

Yes UCS works finde.

Ah ok missing Parameters

i tryed

ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=62univention-portal,cn=ldapacl,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=univention-portal,cn=udm_syntax,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=portals/portal,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=portals/category,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=portals/entry,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=portals/folder,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ
ldapdelete -x -D ‚Äúcn=admin,$(ucr get ldap/base)‚ÄĚ -y /etc/ldap.secret ‚Äúcn=portals/all,cn=udm_module,cn=univention,dc=dom,dc=stone‚ÄĚ

The COMMANDs are working now !!

I tryed again = univention-upgrade --ignoressh --ignoreterm


Checking for release updates: found: UCS 5.0-0
Do you want to update to 5.0-0 [Y|n]? y

Starting update to UCS version 5.0-0

Starting /tmp/tmphkBSGY/preupXz4Y6J.sh (Mit Okt 27 05:01:35 CEST 2021):

HINT:
Please check the release notes carefully BEFORE updating to UCS 5.0-0:
English version: https://docs.software-univention.de/release-notes-5.0-0-en.html
German version: https://docs.software-univention.de/release-notes-5.0-0-de.html

Please also consider documents of following release updates and
3rd party components.

Do you want to continue [Y/n]? y

Checking adc_mapping … OK
Checking adc_multiinstance_mapping … OK
Checking architecture … OK
Checking blocking_apps … OK
Checking default_master_packages … OK
Checking disk_space … OK
Checking failed_ldif … OK
Checking for_postgresql94 … OK
Checking hold_packages … OK
Checking kernel … OK
Checking kolab_schema … OK
Checking ldap_connection … OK
Checking ldap_schema … OK
Checking legacy_objects … OK
Checking master_version … OK
Checking md5_signature_is_used … OK
Checking min_version … OK
Checking minimum_ucs_version_of_all_systems_in_domain … OK
Checking old_packages … OK
Checking overwritten_umc_templates … OK
Checking ox_schema … OK
Checking package_status … OK
Checking python_ucr_template_compatibility …
OK
Checking python_ucsschool_import_hook_compatibility … OK
Checking role_package_removed … OK
Checking samba_server_schannel … OK
Checking samba_tdb_size … OK
Checking slapd_on_member … OK
Checking ssh … OK
Checking system_date_too_old … OK
Checking system_role … OK
Checking term … OK
Checking tls_public_key_size … OK
Checking tls_public_key_size_ucs-sso … OK
Checking usr_mountpoint … OK
Checking valid_machine_credentials … OK

Several LDAP objects are no longer supported with UCS 5 and are removed automatically.
An LDIF file of removed objects is available: /var/univention-backup/update-to-5.0-0/removed_with_ucs5_2021-10-27-07.ldif
Removing objects with obsolete objectClasses

(structuralObjectClass=univentionAdminUserSettings)
(structuralObjectClass=univentionPolicySharePrintQuota)
(structuralObjectClass=univentionXConfigurationChoices)
(structuralObjectClass=univentionMailQuota)
(structuralObjectClass=univentionPolicyAutoStart)
(structuralObjectClass=univentionPolicyThinClient)
Deleting object(s) with dn: cn=default-settings,cn=thinclient,cn=p

… now the CHECKING works :slight_smile:

Thank you i hope the Upgrade to 5.0 is now runing

Thank you very much Regards Stone

Hello Dejavu

Have updated to version 5.
The update went through without errors.
Had stupidly installed this PREVIEW PORTAL before.

BUT after the update and restart it was no longer possible to use the portal.
when I log into the web portal I get only a GREY SCREEN displayed (see photos) without content with the loading icon.

Is there a repair installation or commands with which the update is performed again via SSH eg and incorrect packages are fixed with it?

Or can I reinstall the portal via SSH? (package)

Unfortunately I do not get further …

Thanks a lot

ucs_1 ucs_2 ucs_3

Hello. I’m not sure if it is going to work, but you can try using APT to purge (to remove all relevant configuration files) and then install back or remove and install back, or simply reinstall univention-portal if the system allows.

Here is the package general info.

# apt show univention-portal
Package: univention-portal
Version: 4.0.5-64A~5.0.0.202108121215
Priority: optional
Section: univention
Maintainer: Univention GmbH <packages@univention.de>
Installed-Size: 1,322 kB
Depends: netcat-openbsd, python3-univention-portal (= 4.0.5-64A~5.0.0.202108121215), python3-click, python3-requests, python3-tornado, univention-config (>= 7.0.25), univention-directory-listener, univention-directory-manager-tools, univention-management-console-server, univention-join (>= 12.0.0-7)
Download-Size: 574 kB
APT-Manual-Installed: no
APT-Sources: https://updates.software-univention.de errata500/main amd64 Packages
Description: Univention Portal - Central portal web page for a UCS domain
 Univention Portal is a web interface which allows a central view
 to a UCS domain with all installed Apps and services. Univention
 Portal is configurable, i.e., any and multiple servers can be
 configured to be show a portal. Portal entries can be configured
 to be accessible only on specific hosts. Univention Portal is also
 customisable with a logo and background image.
 .
 This package is part of Univention Corporate Server (UCS),
 an integrated, directory driven solution for managing
 corporate environments. For more information about UCS,
 refer to: https://www.univention.de/

Keep an eye on other packages while purging univention-portal.

# apt purge univention-portal 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
  netcat-openbsd python3-click python3-colorama python3-univention-portal
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  univention-portal*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
After this operation, 1,322 kB disk space will be freed.
Do you want to continue? [Y/n]