Bug 38317 - Missing sanity check when adding users to groups
Missing sanity check when adding users to groups
Status: RESOLVED DUPLICATE of bug 43005
Product: UCS
Classification: Unclassified
Component: UMC - Groups
UCS 4.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-04-22 15:15 CEST by Janis Meybohm
Modified: 2016-11-21 12:05 CET (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Error handling, Usability
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Janis Meybohm univentionstaff 2015-04-22 15:15:47 CEST
Ticket#2015041621000521

I'm able to add non-existent users to groups without an error message (or better: with positive confirmation):

root@master:~# lsb_release -a
No LSB modules are available.
Distributor ID: Univention
Description:    Univention Corporate Server 4.0-1 errata160 (Walle)
Release:        4.0-1 errata160
Codename:       Walle


root@master:~# univention-directory-manager groups/group create --set name="testgroup" 
Object created: cn=testgroup,dc=40lish,dc=qa
root@master:~# univention-directory-manager users/user create --set password='Password01' --set username='somename' --set firstname='Some' --set lastname='Name' --set displayName='Some Name' 
Object created: uid=somename,dc=40lish,dc=qa
root@master:~# univention-directory-manager groups/group modify --dn "cn=testgroup,dc=40lish,dc=qa" --append users="uid=somename,cn=users,dc=40lish,dc=qa"
Object modified: cn=testgroup,dc=40lish,dc=qa
root@master:~# univention-directory-manager groups/group modify --dn "cn=testgroup,dc=40lish,dc=qa" --append users="uid=no,uid=check,uid=at,uid=all"
Object modified: cn=testgroup,dc=40lish,dc=qa
root@master:~# udm groups/group list --filter name=testgroup
name=testgroup
DN: cn=testgroup,dc=40lish,dc=qa
ARG: None
  users: uid=somename,cn=users,dc=40lish,dc=qa
  users: uid=no,uid=check,uid=at,uid=all
  UVMMGroup: None
  gidNumber: 5078
  objectFlag: None
  mailAddress: None
  description: None
  sambaGroupType: 2
  name: testgroup
  adGroupType: -2147483646
  sambaRID: 1127

root@master:~# univention-ldapsearch -xLLL cn=testgroup
dn: cn=testgroup,dc=40lish,dc=qa
sambaGroupType: 2
cn: testgroup
objectClass: top
objectClass: posixGroup
objectClass: univentionGroup
objectClass: sambaGroupMapping
objectClass: univentionObject
univentionObjectType: groups/group
gidNumber: 5078
univentionGroupType: -2147483646
sambaSID: S-1-5-21-2621817644-3705164039-2104105990-1127
uniqueMember: uid=somename,cn=users,dc=40lish,dc=qa
uniqueMember: uid=no,uid=check,uid=at,uid=all
memberUid: somename
memberUid: no

root@master:~# univention-ldapsearch -xLLL -b "uid=somename,cn=users,dc=40lish,dc=qa"
No such object (32)
Matched DN: cn=users,dc=40lish,dc=qa
root@master:~# univention-ldapsearch -xLLL -b "uid=no,uid=check,uid=at,uid=all"
No such object (32)
root@master:~#
Comment 1 Stefan Gohmann univentionstaff 2015-05-15 14:30:54 CEST
We have to be careful with such a change. The connector needs to set users to groups which don't exists yet.
Comment 2 Florian Best univentionstaff 2016-11-21 12:05:11 CET

*** This bug has been marked as a duplicate of bug 43005 ***