Bug 54477 – Slaptest validation error when creating udm settings/ldapacl not logged

Bug 54477 - Slaptest validation error when creating udm settings/ldapacl not logged


Summary:	Slaptest validation error when creating udm settings/ldapacl not logged

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	univention-lib
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:	UCS maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2022-02-22 12:02 CET by Julia Bremer
Modified:	2022-03-04 13:11 CET (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.046
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2022020821000491
Bug group (optional):	bitesize, Error handling
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Julia Bremer

2022-02-22 12:02:16 CET

When trying to add a udm settings/acl object like this:

udm settings/ldapacl create --position cn=ldapacl,cn=univention,dc=bbc,dc=local --set name=63b4aonboarding --set filename=63b4aonboarding --set data=$(bzip2 -c /tmp/bbacl | base64 -w0) --set package=b4aonboarding-custom-acl --set packageversion=2.3

and the ACL in the file is invalid, only this is logged in UCS4:

UNIVENTION_DEBUG_BEGIN  : admin.handlers.simpleLdap._update_policies
UNIVENTION_DEBUG_END    : admin.handlers.simpleLdap._update_policies
22.02.22 08:49:19.410  LISTENER    ( ERROR   ) : ldap_extension: slapd.conf validation failed:
.
UNIVENTION_DEBUG_BEGIN  : uldap.__open host=master.bbc.local port=7389 base=dc=bbc,dc=local


This is because in ldap/extension.py only stdout and not stderr is printed here:
ud.debug(ud.LISTENER, ud.ERROR, '%s: slapd.conf validation failed:\n%s.' % (name, stdout))


In UCS5 this has been fixed by 
2b5391ce91 Bug #51648: log combined stdout + stderr in univention.lib.udm_extension

We should cherry-pick that commit