Description Florian Best 2020-05-26 13:30:06 CEST

Using python-ldap 3.1.0-2 from debian buster causes tracebacks in the univention-directory-listener:

Traceback (most recent call last):
  File "/usr/lib/univention-directory-listener/system/quota.py", line 216, in handler
    if _is_container_change_relevant(new, old):
  File "/usr/lib/univention-directory-listener/system/quota.py", line 142, in _is_container_change_relevant
    lo = _get_ldap_connection()
  File "/usr/lib/univention-directory-listener/system/quota.py", line 119, in _get_ldap_connection
    connection = univention.uldap.getMachineConnection(ldap_master=False)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 192, in getMachineConnection
    return access(host=server, port=port, base=ucr['ldap/base'], binddn=ucr['ldap/hostdn'], bindpw=bindpw, start_tls=start_tls, decode_ignorelist=decode_ignorelist, reconnect=reconnect)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 286, in __init__
    self.__open(ca_certfile)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 358, in __open
    self.lo = ldap.ldapobject.ReconnectLDAPObject(self.uri, trace_stack_limit=None, retry_max=self.client_connection_attempt, retry_delay=1, bytes_mode=False, bytes_strictness='warn')
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 1098, in __init__
    bytes_strictness=bytes_strictness)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 99, in __init__
    self._trace_level = trace_level or ldap._trace_level
AttributeError: 'module' object has no attribute '_trace_level'

This happens when the python code is loaded with byte optimization (where __debug__ is False):

Patch:
https://github.com/python-ldap/python-ldap/pull/234

For UCS 5.0 we need to prevent this or patch python-ldap.