Bug 31068 - Don't run server password change at the same date on all systems
Don't run server password change at the same date on all systems
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: General
UCS 3.1
Other Linux
: P5 enhancement (vote)
: UCS 3.2
Assigned To: Felix Botner
Philipp Hahn
: interim-1
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-04-16 09:29 CEST by Janis Meybohm
Modified: 2013-11-19 06:44 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Janis Meybohm univentionstaff 2013-04-16 09:29:36 CEST
Server password change runs at the same date on all systems (if "$(date +%j | sed -e 's|^0*||') % $(ucr get server/password/interval) == 0").

This schould be changed to something like "every $(ucr get server/password/interval) days starting at installation date" so that bugs/problems within the server password change do not hit every customer at the same time.
Comment 1 Moritz Muehlenhoff univentionstaff 2013-05-31 10:45:31 CEST
We will not ship a UCS 3.1-2 release; the next UCS release will be UCS 3.2.

As such, this bug is moved to the new target milestone.
Comment 2 Felix Botner univentionstaff 2013-06-10 16:42:37 CEST
The rotation of machine passwords is now performed after amount of days
in server/password/change since the last password change.
Comment 3 Philipp Hahn univentionstaff 2013-08-13 10:34:15 CEST
OK: svn41293,41294
but there's no need to convert it into a bash-only script:
@@ -1,1 +1,1 @@
-#!/bin/bash
+#!/bin/sh
@@ -75,q +75,1 @@
-if (("$server_password_interval" > "$days_last_change")); then
+if [ "$server_password_interval" -gt "$days_last_change" ]; then

FAIL→OK: Changelog svn41295→43124 re-worded to

The rotation of machine passwords is performed in intervals of days configurable through the &ucsUCRV; <envar>server/password/change</envar>.
The date is now calculated relative to the date of the last password change instead of being relative to the start of the current year (<ulink url="&ucsbug;31068">Bug 31068</ulink>).
Comment 4 Stefan Gohmann univentionstaff 2013-11-19 06:44:26 CET
UCS 3.2 has been released:
 http://docs.univention.de/release-notes-3.2-en.html
 http://docs.univention.de/release-notes-3.2-de.html

If this error occurs again, please use "Clone This Bug".