Bug 42132 - Self-Service should use UMC as anonymous user
Self-Service should use UMC as anonymous user
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Self Service
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.2
Assigned To: Florian Best
Erik Damrose
: interim-2
Depends on:
Blocks: 43565 44221
  Show dependency treegraph
 
Reported: 2016-08-25 17:03 CEST by Florian Best
Modified: 2017-04-04 18:29 CEST (History)
5 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2016-08-25 17:03:58 CEST
The Self-Service should use the new features of Bug #42114.
Comment 1 Florian Best univentionstaff 2017-01-30 18:54:01 CET
So far I did these changes (remove the WSGI framework + use tools.umcCommand()/univention.lib.umc.Client)

ucs-test (7.0.10-14):
r76205 | Bug #34498 / Bug #42132: use univention.lib.umc.Client
r71953 | Bug #42132: replace WSGI parts of self service with UMC

univention-self-service (2.0.0-2):
r76206 | Bug #42132: use tools.umcpCommand
r76172 | Bug #42132: Adjust 4.2 manual links
r71953 | Bug #42132: replace WSGI parts of self service with UMC

The rest is done by Juern/Eduard in Bug #42173?!
Comment 2 Florian Best univentionstaff 2017-02-02 22:25:49 CET
Fixed also the following error messages in the joinscript:

ERROR: Module wsgi does not exist!
ERROR: Site univention-self-service does not exist!

r76358 | Bug #42132: remove WSGI apache parts
Comment 3 Erik Damrose univentionstaff 2017-03-01 13:21:10 CET
Reop
Comment 4 Erik Damrose univentionstaff 2017-03-01 13:22:46 CET
Reopen: when accessing any of the password reset modules and entering a username, i immediately get a 'session timeout' popup, and the umc logs get spammed several times a second with

==> /var/log/univention/management-console-server.log <==
01.03.17 13:12:51.616  MAIN        ( WARN    ) : Module None (command='passwordreset/get_reset_methods', id='148837037145104-695') does not exists anymore
01.03.17 13:12:51.664  MODULE      ( PROCESS ) : Verboten

==> /var/log/univention/management-console-web-server.log <==
01.03.17 13:12:51.665  MAIN        ( PROCESS ) : CPCommand (192.168.0.249:33056) response status code: 401
01.03.17 13:12:51.665  MAIN        ( PROCESS ) : CPCommand (192.168.0.249:33056) response message: Verboten
01.03.17 13:12:51.666  MAIN        ( PROCESS ) : CPCommand (192.168.0.249:33056) response result: None
Comment 5 Florian Best univentionstaff 2017-03-06 15:04:10 CET
Accidently commited with the wrong bug number:

univention-self-service (2.0.5-5):
r77376 | Bug #42132: fix dependency
r77375 | Bug #42267: Fix l10n integration
Comment 6 Erik Damrose univentionstaff 2017-03-06 17:27:52 CET
OK: Set recovery mail address on master
OK: Request resetmail, enter token, reset password -> password is changed

Reopen: when trying to login with a wrong password, the logfile correctly logs 06.03.17 17:22:40.677  MODULE      ( PROCESS ) : Entweder stimmen Benutzername und Passwort nicht oder Sie haben keine Berechtigung diesen Dienst zu nutzen.

But the web frontend shows "Ein unbekannter Fehler mit Status-Code 403 trat während des Verbindungsaufbaus zum Server auf. Bitte versuchen Sie es später noch einmal."

Although passwordreset/get_contact correctly returns a json object with the correct message, and with status: 403
Comment 7 Erik Damrose univentionstaff 2017-03-07 10:19:40 CET
(In reply to Erik Damrose from comment #6)
> But the web frontend shows "Ein unbekannter Fehler mit Status-Code 403 trat
> während des Verbindungsaufbaus zum Server auf. Bitte versuchen Sie es später
> noch einmal."
> 
> Although passwordreset/get_contact correctly returns a json object with the
> correct message, and with status: 403

-> bug #43743 ?
Comment 8 Erik Damrose univentionstaff 2017-03-16 11:00:27 CET
Verified: I can use all self service functions without logging in first - authentication is done on a if-required basis. Function are declared as allow_anonymous="true"

umc-command -n passwordreset/get_contact -o username=univention -o password=univention
Comment 9 Stefan Gohmann univentionstaff 2017-04-04 18:29:13 CEST
UCS 4.2 has been released:
 https://docs.software-univention.de/release-notes-4.2-0-en.html
 https://docs.software-univention.de/release-notes-4.2-0-de.html

If this error occurs again, please use "Clone This Bug".