Bug 27853 – LDAP-Fehler beim anlegen eines Posix-only-Benutzers: displayName

Bug 27853 - LDAP-Fehler beim anlegen eines Posix-only-Benutzers: displayName


Summary:	LDAP-Fehler beim anlegen eines Posix-only-Benutzers: displayName

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	UMC - Users
Version:	UCS 3.0
Hardware:	All Linux

Importance:	P4 normal (vote)
Target Milestone:	UCS 3.1
Assigned To:	Lukas Walter
QA Contact:	Dirk Wiesenthal

URL:
Keywords:	interim-3

Duplicates:	25168 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2012-07-09 11:26 CEST by Philipp Hahn
Modified:	2013-02-25 12:23 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Troubleshooting, Usability
Max CVSS v3 score:

Flags:	hahn: Patch_Available+

Attachments
bind displayName to person\|samba instead of posix (9.51 KB, patch) 2012-07-09 12:49 CEST, Philipp Hahn	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2012-07-09 11:26:37 CEST

1. Benutzer anlegen:
1.1 dabei alle Optionen bis auf Posix deaktivieren
1.2 Benutname, UID, password vergeben
1.3 Anlegen
2. Fehler: Das UDM-Objekt konnte nicht gespeichert werden: LDAP-Fehler

# ucr search --brief '^version/'
version/erratalevel: 93
version/patchlevel: 1
version/version: 3.0

# tail /var/log/univention/management-console-module-udm.log | grep ldapError
09.07.12 11:20:35.566  MODULE      ( WARN    ) : Failed to create LDAP object: ldapError: Object class violation: attribute 'displayName' not allowed

Comment 1 Philipp Hahn

2012-07-09 11:40:14 CEST

./univention-directory-manager-modules/modules/univention/admin/handlers/users/user.py
...
options={
...
	'displayName': univention.admin.property(
			options=['posix'],
...
	def _ldap_addlist(self):
...
			if 'posix' in self.options:
				ocs.extend(['posixAccount', 'shadowAccount'])
...
$ ldapsearch -xLLLb 'cn=Subschema' -s base objectClasses | ldapsearch-wrapper | egrep "NAME '(posix|shadow)Account'"
objectClasses: ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction of an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ description ) )
objectClasses: ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional attributes for shadow passwords' SUP top AUXILIARY MUST uid MAY ( userPassword $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ description ) )

Comment 2 Philipp Hahn

2012-07-09 11:42:27 CEST

$ ldapsearch -xLLLb 'cn=Subschema' -s base objectClasses | ldapsearch-wrapper | egrep displayName | grep --only "NAME '[^']*'"
NAME 'sambaGroupMapping'
NAME 'inetOrgPerson'
NAME 'univentionUserTemplate'
NAME 'sambaSamAccount'

Comment 3 Philipp Hahn

2012-07-09 12:49:59 CEST

Created attachment 4520 [details]
bind displayName to person|samba instead of posix

+ moderization

Comment 4 Stefan Gohmann

2012-07-17 17:09:49 CEST

UCS 3.1 will be the next release.

Comment 5 Lukas Walter

2012-10-25 12:12:33 CEST

(In reply to comment #3)
> bind displayName to person|samba instead of posix

Das behebt das Problem.


univention-directory-manager-modules (8.0.72-1) unstable; urgency=low
  * bind attribute "displayName" to options "samba|person" instead
    of posix (Bug #27853)

svn 36615

Comment 6 Dirk Wiesenthal

2012-11-12 20:38:11 CET

Konnte nachvollzogen werden, nach dem Update tritt der Fehler nicht mehr auf.

Changelog okay.

VERIFIED.

Comment 7 Philipp Hahn

2012-11-30 18:26:38 CET

*** Bug 25168 has been marked as a duplicate of this bug. ***

Comment 8 Stefan Gohmann

2012-12-12 21:09:10 CET

UCS 3.1-0 has been released: 
 http://forum.univention.de/viewtopic.php?f=54&t=2125

If this error occurs again, please use "Clone This Bug".