Bug 29058 - Samba4-Test: Password Wechsel
Samba4-Test: Password Wechsel
Status: CLOSED FIXED
Product: UCS Test
Classification: Unclassified
Component: Samba
unspecified
Other Linux
: P5 normal (vote)
: UCS 3.2
Assigned To: Arvid Requate
Stefan Gohmann
: interim-2
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-11-05 17:50 CET by Tobias Peters
Modified: 2013-11-19 06:43 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
Patch-Vorschlag (12.37 KB, patch)
2013-03-25 17:03 CET, Arvid Requate
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Tobias Peters univentionstaff 2012-11-05 17:50:23 CET
Es soll getestet werden ob bei einer Änderung des Passworts mit Samba, UDM oder Kerberos diese Änderung auch zu den jeweils anderen beiden Komponenten synchronisiert wird.
Comment 1 Tobias Peters univentionstaff 2012-11-07 14:53:10 CET
Test wurde hinzugefügt als 51_samba4/41password_change
Revision 36987
Comment 2 Stefan Gohmann univentionstaff 2013-03-11 08:03:59 CET
Der Test schlägt im Jenkins fehl:

Standard Ausgabe (STDOUT)

Password complexity deactivated!
Minimum password age changed!
All changes applied successfully!
Object created: uid=pyvst5dw,cn=users,dc=eu-west-1,dc=compute,dc=amazonaws,dc=com
----initial connection
----password change with samba-tool
Changed password OK
----password change with udm
Object modified: uid=pyvst5dw,cn=users,dc=eu-west-1,dc=compute,dc=amazonaws,dc=com
----password change with kpasswd
Found /root/root.secret, using that secret for Administrator access
ldap_bind: Invalid credentials (49)
kinit: Password incorrect
Object removed: uid=pyvst5dw,cn=users,dc=eu-west-1,dc=compute,dc=amazonaws,dc=com
Password complexity activated!
Minimum password age changed!
All changes applied successfully!

Standard Fehler (STDERR)

debug 2013-03-11 04:14:17	 Locale is en_US.UTF-8:UTF-8
debug 2013-03-11 04:14:17	 locale: LANG=en_US.UTF-8
LANGUAGE=
LC_CTYPE="en_US.UTF-8"
LC_NUMERIC="en_US.UTF-8"
LC_TIME="en_US.UTF-8"
LC_COLLATE="en_US.UTF-8"
LC_MONETARY="en_US.UTF-8"
LC_MESSAGES="en_US.UTF-8"
LC_PAPER="en_US.UTF-8"
LC_NAME="en_US.UTF-8"
LC_ADDRESS="en_US.UTF-8"
LC_TELEPHONE="en_US.UTF-8"
LC_MEASUREMENT="en_US.UTF-8"
LC_IDENTIFICATION="en_US.UTF-8"
LC_ALL=
info 2013-03-11 04:14:17	 create user pyvst5dw
error 2013-03-11 04:15:02	 Could not authenticate against samba after password change with kpasswd.
error 2013-03-11 04:15:02	 **************** Test failed above this line (1) ****************
error 2013-03-11 04:15:36	 *** Check failed (1), but this might be caused by the error above ***
error 2013-03-11 04:15:46	 *** Check failed (1), but this might be caused by the error above ***
info 2013-03-11 04:15:46	 remove user pyvst5dw
debug 2013-03-11 04:15:46	 user pyvst5dw removed
info 2013-03-11 04:15:46	 checking whether the user pyvst5dw is really removed
debug 2013-03-11 04:15:46	 user pyvst5dw does not exist
Comment 3 Arvid Requate univentionstaff 2013-03-25 17:03:21 CET
Created attachment 5151 [details]
Patch-Vorschlag

Ich denke ssh kann hier vermieden werden. Bei pexpect sollte darauf geachtet werden, dass die erwarteten Strings auch wirklich auftreten damit es nicht erst auf die timeouts wartet.
Comment 4 Tobias Peters univentionstaff 2013-03-27 17:14:45 CET
Der Patch wurde so angewendet. Es wird nun also ssh vermieden und die Anzahl der Iterationen der einzelnen Abfragen ausgegeben. 

Zudem wurde ein Fehler beim Wiederherstellen der Passworteinstellungen behoben.
Comment 5 Stefan Gohmann univentionstaff 2013-05-02 07:47:58 CEST
Ich habe noch eine Abhängigkeit auf python-pexpect hinzugefügt:

Aus der Logdatei:

Authentication against kinit after password change with UDM succeeded at attempt 1.
----password change with kpasswd
Traceback (most recent call last):
  File "kpasswd_change_pwd.py", line 2, in <module>
    import pexpect
ImportError: No module named pexpect
Comment 6 Arvid Requate univentionstaff 2013-06-25 13:45:42 CEST
Ok, works. There should be one changelog entry gathering all recent (post 3.1-1) changes to the samba4 testcases.
Comment 7 Arvid Requate univentionstaff 2013-06-26 18:37:40 CEST
I also activated the tests for backup ans slave. changelog added, please QA.
Comment 8 Stefan Gohmann univentionstaff 2013-07-02 09:58:32 CEST
Move to TM 3.2.
Comment 9 Stefan Gohmann univentionstaff 2013-08-20 10:49:25 CEST
OK, the test looks good. The S3 test still failed, but that is Bug #31794.
Comment 10 Stefan Gohmann univentionstaff 2013-11-19 06:43:00 CET
UCS 3.2 has been released:
 http://docs.univention.de/release-notes-3.2-en.html
 http://docs.univention.de/release-notes-3.2-de.html

If this error occurs again, please use "Clone This Bug".