Bug 48652 - Add 'proof_uniqueMembers' to diagnostic
Add 'proof_uniqueMembers' to diagnostic
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC - System diagnostic
UCS 4.4
Other Linux
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Maximilian Janßen
Florian Best
:
Depends on:
Blocks: 54929 54856 54988
  Show dependency treegraph
 
Reported: 2019-02-12 10:43 CET by Nico Stöckigt
Modified: 2022-07-14 13:10 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019020421000978
Bug group (optional): bitesize
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nico Stöckigt univentionstaff 2019-02-12 10:43:26 CET
Now and then an environment appears where the group membership attributes 'uniqueMember' and 'memberUid' are no longer consistent. As long as we didn't find the root cause for that behavior it would be a neat and quick step to integrate the script into the system diagnostic with a "fix me" button like the samba sysvol sync.
Comment 1 Ingo Steuwer univentionstaff 2021-05-14 16:51:01 CEST
should be still relevant for UCS 4.4
Comment 2 Maximilian Janßen univentionstaff 2022-04-29 16:47:42 CEST
univention-management-console-module-diagnostic.yaml
f2b0da7c078e | Bug #48652: yaml
6d80fe10eb3b | Bug #48652: added check for group membership attribute consistency

univention-management-console-module-diagnostic (6.0.0-31)
6d80fe10eb3b | Bug #48652: added check for group membership attribute consistency
Comment 4 Florian Best univentionstaff 2022-05-02 11:16:08 CEST
Other things:
The error messages are printed as bytestrings.

And some translation issues:

> +msgid "Check LDAP database for group membership attribute errors"
> +msgstr "Teste die LDAP datenbank auf inkonsistenzen in Gruppen-Mitgliedschaften."
→ Wrong translation

> +msgid "You can run `/usr/share/univention-directory-manager-tools/proof_uniqueMembers` to fix the issue."
> +msgstr "Sie können `/usr/share/univention-directory-manager-tools/proof_uniqueMembers` ausführen um das Problem zu beheben"
→ Missing dot at the end of the sentence.

> +msgid "`/usr/share/univention-directory-manager-tools/proof_uniqueMembers -c` found an error with the LDAP database group membership attributes."
> +msgstr "`/usr/share/univention-directory-manager-tools/proof_uniqueMembers -c` hateinen Fehler in der LDAP Datenbak mit Gruppen-mitgliedschaftsAttributen gefunden."
→ Missing space between "hateinen"

> +msgid "`/usr/share/univention-directory-manager-tools/proof_uniqueMembers -c` found no errors with the LDAP database group membership attributes."
> +msgstr "`/usr/share/univention-directory-manager-tools/proof_uniqueMembers -c` hat keineProbleme in der LDAP Datenbak mit Gruppen-mitgliedschafts Attributen gefunden."
→ Missing space between "keinProbleme"
Comment 5 Maximilian Janßen univentionstaff 2022-05-11 17:12:35 CEST
univention-management-console-module-diagnostic.yaml
8fab08429fb2 | fixup! Bug #48652: yaml

univention-management-console-module-diagnostic (6.0.0-32)
9c1c66cd6ea7 | fixup! Bug #48652: added check for group membership attribute consistency
Comment 6 Florian Best univentionstaff 2022-05-19 20:07:23 CEST
REOPEN: I get the following exception:

univention-run-diagnostic-checks -t 63_proof_uniqueMembers

############################################ Start 63_proof_uniqueMembers ###########################################
## Check failed: 63_proof_uniqueMembers - Teste die LDAP-Datenbank auf Inkonsistenzen in Gruppen-Mitgliedschaften. ##
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/__init__.py", line 280, in execute
    result = execute(umc_module, **kwargs)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/diagnostic/plugins/63_proof_uniqueMembers.py", line 82, in run
    error_descriptions.append(output.decode('utf-8', 'replace'))
AttributeError: 'str' object has no attribute 'decode'
############################################# End 63_proof_uniqueMembers ############################################
Comment 7 Maximilian Janßen univentionstaff 2022-06-01 09:49:15 CEST
univention-management-console-module-diagnostic.yaml
593ecdff4ff5 | Bug #48652 fixup2: yaml

univention-management-console-module-diagnostic (6.0.0-33)
dfeabdbad33e | Bug #48652: fixed decode error in 63_proof_uniqueMembers
Comment 8 Florian Best univentionstaff 2022-06-01 13:05:35 CEST
OK: univention-run-diagnostic-checks -t 63_proof_uniqueMembers
############################################ Start 63_proof_uniqueMembers ###########################################
## Check failed: 63_proof_uniqueMembers - Teste die LDAP-Datenbank auf Inkonsistenzen in Gruppen-Mitgliedschaften. ##
`/usr/share/univention-directory-manager-tools/proof_uniqueMembers -c` hat einen Fehler in der LDAP-Datenbank mit Gruppenmitgliedschafts-Attributen gefunden.

STDOUT:
Warning: No member for DN 'uid=demo_student2,cn=schueler,cn=users,ou=DEMOSCHOOL,l=school,l=dev', will be removed
Checking if users are member of their primary group...
Checked 22 posixAccounts, fixed 0 issues.
Checking if group-members exist...
Removing member DN 'uid=demo_student2,cn=schueler,cn=users,ou=DEMOSCHOOL,l=school,l=dev' from 'cn=DEMOSCHOOL-Democlass,cn=klassen,cn=schueler,cn=groups,ou=DEMOSCHOOL,l=school,l=dev'
Checked 101 posixGroups, fixed 1 issues.
There were 1 warning(s)!

Sie können `/usr/share/univention-directory-manager-tools/proof_uniqueMembers` ausführen um das Problem zu beheben.
############################################# End 63_proof_uniqueMembers ############################################

OK: YAML