Bug 46303 - appcenter/docker/progress: permissionDenied
appcenter/docker/progress: permissionDenied
Status: NEW
Product: UCS
Classification: Unclassified
Component: App Center
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: App Center maintainers
App Center maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-02-16 12:09 CET by Johannes Keiser
Modified: 2021-11-26 15:09 CET (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.257
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2021040321000499, 2019052121000494, 2018012421000658, 2020121621000979, 2020121621001003, 2020121621001012, 2020121621001021, 2020121721000011, 2020121721000021, 2020122421000105, 2020121621000933, 2021011821000261, 2020121821000751, 2021060421000761
Bug group (optional): External feedback
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Keiser univentionstaff 2018-02-16 12:09:08 CET
Version: 4.2-3 errata52 (Lesum)

Die Ausführung des Kommandos appcenter/docker/progress ist fehlgeschlagen:

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/base.py", line 250, in execute
    function.__func__(self, request, *args, **kwargs)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 318, in _response
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 192, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 440, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 286, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 149, in progress
    ret = progress_obj.poll()
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 309, in _thread
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 192, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 440, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 286, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/appcenter/__init__.py", line 418, in invoke_docker
    result['success'] = action.call(app=app, username=self.username, password=self.password, **kwargs)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 220, in call
    return obj.call_with_namespace(namespace)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 226, in call_with_namespace
    result = self.main(namespace)
  File "%PY2.7%/univention/appcenter/actions/install.py", line 72, in main
    return self.do_it(args)
  File "%PY2.7%/univention/appcenter/actions/install_base.py", line 98, in do_it
    self._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_install.py", line 62, in _do_it
    ret = super(Install, self)._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/install.py", line 89, in _do_it
    if self._install_app(app, args):
  File "%PY2.7%/univention/appcenter/actions/docker_install.py", line 54, in _install_app
    hostdn, password = self._register_host(app, args)
  File "%PY2.7%/univention/appcenter/actions/register.py", line 287, in _register_host
    obj = create_object_if_not_exists('computers/%s' % app.docker_server_role, lo, pos, name=hostname, description=description, domain=domain, password=password,
objectFlag='docker', policies=policies)
  File "%PY2.7%/univention/appcenter/udm.py", line 97, in create_object_if_not_exists
    obj.create()
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 381, in create
    dn = self._create(response=response, serverctrls=serverctrls)
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1036, in _create
    self.lo.add(self.dn, al, serverctrls=serverctrls, response=response)
  File "%PY2.7%/univention/admin/uldap.py", line 477, in add
    raise univention.admin.uexceptions.permissionDenied
permissionDenied


Role: memberserver
Comment 1 Johannes Keiser univentionstaff 2019-05-28 11:57:54 CEST
Version: 4.4-0 errata109 (Blumenthal)

Interner Server-Fehler in "appcenter/docker/progress".
Request: appcenter/docker/progress

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/base.py", line 260, in execute
    function.__func__(self, request, *args, **kwargs)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 318, in _response
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 192, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 440, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 286, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 149, in progress
    ret = progress_obj.poll()
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 309, in _thread
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 192, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 440, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 286, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/appcenter/__init__.py", line 436, in invoke_docker
    result['success'] = action.call(app=app, username=self.username, password=self.password, **kwargs)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/__init__.py", line 220, in call
    return obj.call_with_namespace(namespace)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/__init__.py", line 226, in call_with_namespace
    result = self.main(namespace)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/install.py", line 84, in main
    return self.do_it(args)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/install_base.py", line 119, in do_it
    self._do_it(app, args)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/docker_install.py", line 63, in _do_it
    ret = super(Install, self)._do_it(app, args)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/install.py", line 104, in _do_it
    self._register_app(app, args)
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/actions/register.py", line 432, in _register_app
    ldap_object.add_localhost()
  File "/usr/lib/python2.7/dist-packages/univention/appcenter/udm.py", line 245, in add_localhost
    self._udm_obj.modify()
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 642, in modify
    dn = self._modify(modify_childs, ignore_license=ignore_license, response=response)
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1312, in _modify
    self.dn = self.lo.modify(self.dn, ml, ignore_license=ignore_license, serverctrls=serverctrls, response=response)
  File "%PY2.7%/univention/admin/uldap.py", line 891, in modify
    raise univention.admin.uexceptions.permissionDenied
permissionDenied

Role: memberserver
Comment 4 Christian Castens univentionstaff 2021-01-08 13:25:07 CET
reported again in different tickets from the same user:

Version: 4.4-7 errata849 (Blumenthal)

Remark: UCS release and packages up-to-date
Started Zammad update, after a few min this error

Remark: UCS release and packages uptodate
Wanted to uninstall and after short while got this error

Remark: Two min ago I reported this error while uninstalling from the server with Brenno installed.
Now tried to uninstall Brenno using Primairy Domain Controller

Remark: This is my third report about an error removing Benno.
Now tried to remove using the Secondairy Domain Controller

Remark: Reported an error while installing Zammad a few minutes ago.
UCS and packages up-to-date
First initiating installation from Primary Domain Controller
Right now doing this on the VM where Zammad must reside

Role: memberserver


Mail from Dirk to the user that sent the reports can be found in ticket 2020122421000105 (description of the problem and possible workaround)
Comment 5 Philipp Hahn univentionstaff 2021-02-18 17:59:51 CET
This blocks installation of `univention-node-exporter` on our own build system servers!
https://helpdesk.knut.univention.de/#ticket/zoom/1806
Comment 6 Riya Bhattacharjee univentionstaff 2021-04-08 14:32:56 CEST
Reported again in Feedback Ticket 2021040321000499
Comment 7 Christian Castens univentionstaff 2021-06-21 15:46:56 CEST
Version: 4.4-8 errata987 (Blumenthal)

Remark: Did a normal upgrade, using the UCS interface. Nothing fancy.
As far as I remember I have not changed anything using the cli.

Maybe I will roll-back my backup, but I first need to check what (end if anything) is broken.

Gr!
@

Error:
Internal server error during "appcenter/docker/progress".
Request: appcenter/docker/progress

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/base.py", line 359, in __error_handling
    six.reraise(etype, exc, etraceback)
  File "%PY2.7%/univention/management/console/base.py", line 262, in execute
    function.__func__(self, request, *args, **kwargs)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 321, in _response
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 158, in progress
    ret = progress_obj.poll()
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 102, in poll
    six.reraise(self.exc_info[1], None, self.exc_info[2])
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 312, in _thread
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/appcenter/__init__.py", line 491, in invoke_docker
    result['success'] = action.call(app=app, username=self.username, password=self.password, **kwargs)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 220, in call
    return obj.call_with_namespace(namespace)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 226, in call_with_namespace
    result = self.main(namespace)
  File "%PY2.7%/univention/appcenter/actions/upgrade.py", line 81, in main
    return self.do_it(args)
  File "%PY2.7%/univention/appcenter/actions/install_base.py", line 143, in do_it
    self._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_upgrade.py", line 126, in _do_it
    self._upgrade_image(app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_upgrade.py", line 183, in _upgrade_image
    self._install_new_app(app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_upgrade.py", line 69, in _install_new_app
    return Install._do_it(self, app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_install.py", line 71, in _do_it
    ret = super(Install, self)._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/install.py", line 107, in _do_it
    self._register_app(app, args)
  File "%PY2.7%/univention/appcenter/actions/register.py", line 437, in _register_app
    ldap_object = get_app_ldap_object(app, lo, pos, or_create=True)
  File "%PY2.7%/univention/appcenter/udm.py", line 280, in get_app_ldap_object
    return ApplicationLDAPObject(app, lo, pos, or_create)
  File "%PY2.7%/univention/appcenter/udm.py", line 180, in __init__
    self._reload(app, create_if_not_exists)
  File "%PY2.7%/univention/appcenter/udm.py", line 195, in _reload
    self._create_obj(app)
  File "%PY2.7%/univention/appcenter/udm.py", line 231, in _create_obj
    obj = create_object_if_not_exists('appcenter/app', self._lo, self._pos, **attrs)
  File "%PY2.7%/univention/appcenter/udm.py", line 102, in create_object_if_not_exists
    obj.create()
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 557, in create
    dn = self._create(response=response, serverctrls=serverctrls)
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1270, in _create
    six.reraise(exc[0], exc[1], exc[2])
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1254, in _create
    self.lo.add(self.dn, al, serverctrls=serverctrls, response=response)
  File "%PY2.7%/univention/admin/uldap.py", line 860, in add
    raise univention.admin.uexceptions.permissionDenied
permissionDenied

Role: memberserver
Comment 8 Maximilian Janßen univentionstaff 2021-11-26 15:09:55 CET
reported again: 2021031021000647


Version: 4.4-7 errata907 (Blumenthal)

Remark: Attempt to install BlueSpice MediaWiki on up-to-date Univention Corporate Server.

Error: 
Internal server error during "appcenter/docker/remote/progress".
Request: appcenter/docker/remote/progress

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/base.py", line 359, in __error_handling
    six.reraise(etype, exc, etraceback)
  File "%PY2.7%/univention/management/console/base.py", line 262, in execute
    function.__func__(self, request, *args, **kwargs)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 321, in _response
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/appcenter/__init__.py", line 423, in remote_progress
    return client.umc_command('appcenter/docker/progress', {'progress_id': remote_progress_id}).result
  File "%PY2.7%/univention/lib/umc.py", line 444, in umc_command
    return self.request('POST', 'command/%s' % (path,), data, headers)
  File "%PY2.7%/univention/lib/umc.py", line 524, in request
    return self.send(request)
  File "%PY2.7%/univention/lib/umc.py", line 553, in send
    raise HTTPError(request, response, self.hostname)
HTTPError: 591 on groups.aidt.us (command/appcenter/docker/progress): {u'status': 591, u'message': u'Internal server error during "appcenter/docker/progress".', u'location':
u'https://****/univention/command'}
Internal server error during "appcenter/docker/progress".
Request: appcenter/docker/progress

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/base.py", line 359, in __error_handling
    six.reraise(etype, exc, etraceback)
  File "%PY2.7%/univention/management/console/base.py", line 262, in execute
    function.__func__(self, request, *args, **kwargs)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 321, in _response
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 158, in progress
    ret = progress_obj.poll()
  File "%PY2.7%/univention/management/console/modules/mixins.py", line 102, in poll
    six.reraise(self.exc_info[1], None, self.exc_info[2])
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 312, in _thread
    result = _multi_response(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "%PY2.7%/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "%PY2.7%/univention/management/console/modules/appcenter/__init__.py", line 484, in invoke_docker
    result['success'] = action.call(app=app, username=self.username, password=self.password, **kwargs)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 220, in call
    return obj.call_with_namespace(namespace)
  File "%PY2.7%/univention/appcenter/actions/__init__.py", line 226, in call_with_namespace
    result = self.main(namespace)
  File "%PY2.7%/univention/appcenter/actions/install.py", line 84, in main
    return self.do_it(args)
  File "%PY2.7%/univention/appcenter/actions/install_base.py", line 143, in do_it
    self._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/docker_install.py", line 71, in _do_it
    ret = super(Install, self)._do_it(app, args)
  File "%PY2.7%/univention/appcenter/actions/install.py", line 107, in _do_it
    self._register_app(app, args)
  File "%PY2.7%/univention/appcenter/actions/register.py", line 437, in _register_app
    ldap_object = get_app_ldap_object(app, lo, pos, or_create=True)
  File "%PY2.7%/univention/appcenter/udm.py", line 280, in get_app_ldap_object
    return ApplicationLDAPObject(app, lo, pos, or_create)
  File "%PY2.7%/univention/appcenter/udm.py", line 180, in __init__
    self._reload(app, create_if_not_exists)
  File "%PY2.7%/univention/appcenter/udm.py", line 195, in _reload
    self._create_obj(app)
  File "%PY2.7%/univention/appcenter/udm.py", line 231, in _create_obj
    obj = create_object_if_not_exists('appcenter/app', self._lo, self._pos, **attrs)
  File "%PY2.7%/univention/appcenter/udm.py", line 102, in create_object_if_not_exists
    obj.create()
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 557, in create
    dn = self._create(response=response, serverctrls=serverctrls)
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1270, in _create
    six.reraise(exc[0], exc[1], exc[2])
  File "%PY2.7%/univention/admin/handlers/__init__.py", line 1254, in _create
    self.lo.add(self.dn, al, serverctrls=serverctrls, response=response)
  File "%PY2.7%/univention/admin/uldap.py", line 860, in add
    raise univention.admin.uexceptions.permissionDenied
permissionDenied

Role: memberserver