Bug 31142 – univention-admingrp-user-passwordreset (ACL test)

Bug 31142 - univention-admingrp-user-passwordreset (ACL test)


Summary:	univention-admingrp-user-passwordreset (ACL test)

Status:	CLOSED WORKSFORME

Product:	UCS Test
Classification:	Unclassified
Component:	LDAP
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 3.2-x
Assigned To:	UCS maintainers
QA Contact:

URL:
Keywords:

Depends on:	31980
Blocks:
	Show dependency tree / graph

Reported:	2013-04-23 14:32 CEST by Liam Schwez
Modified:	2023-03-25 06:42 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Liam Schwez

2013-04-23 14:32:45 CEST

Testing of package "univention-admingrp-user-passwordreset".


Set UCR variables : 

ucr set ldap/acl/user/passwordreset/accesslist/groups/dn="$(group_dn $G_HELPDESK)"

ucr set ldap/acl/user/passwordreset/protected/uid="Administrator,$U_PROT

Helpdesk user can't set PW of unprotected users after receiving priviledged rights by ACL.

The ACL-variable for "protected UIDs" is also omitted. Protected UIDs are still unprotected after setting the ACL-variable.

Note:

"Permission denied" is returned if the helpdesk user tries to modify the ldap attributes: userPassword, sambaNTPassword, krb5Key, krb5KDCFlags, krb5KeyVersionNumber, sambaPwdLastSet.


Tests: /10_ldap/63univention-admingrp-user-passwordreset
       ,/10_ldap/64univention-admingrp-user-passwordreset-selfmodify
and    /10_ldap/66univention-admingrp-user-passwordreset-grpingrp

are currently affected.

Comment 1 Moritz Muehlenhoff

2013-05-31 10:46:49 CEST

We will not ship a UCS 3.1-2 release; the next UCS release will be UCS 3.2.

As such, this bug is moved to the new target milestone.

Comment 2 Erik Damrose

2013-07-16 10:05:57 CEST

univention-admingrp-user-passwordreset has been added to autotest-090-master-s3.cfg and autotest-091-master-s4.cfg

Comment 3 Erik Damrose

2013-07-16 14:28:43 CEST

With the bugfixes from bug 25408 the Test does not fail anymore

Comment 4 Stefan Gohmann

2016-10-12 07:49:28 CEST

For this bug is no separate QA needed.