Bug 33559 - Schoolwizards check existing objectname with wildcards so all subsets of the string are blocked
Schoolwizards check existing objectname with wildcards so all subsets of the ...
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: UMC - Wizards
UCS@school 3.1 R2
Other Linux
: P5 normal (vote)
: UCS@school 3.1 R2 Errata
Assigned To: Dirk Wiesenthal
Sönke Schwardt-Krummrich
:
: 31570 (view as bug list)
Depends on:
Blocks: 33979
  Show dependency treegraph
 
Reported: 2013-11-25 13:40 CET by Tim Petersen
Modified: 2014-02-07 13:48 CET (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Petersen univentionstaff 2013-11-25 13:40:21 CET
Reported by a customer.

The check for an already existing username is done with wildcards in the user wizard (*username*) -> if you create an user "abcd" the following new usernames will lead to "user already exists":
a, b, ab, bc, cd, abc, bcd

I was able to reproduce this in three environments. This also occurs with the class wizard.

I didn't check computerwizard and schoolwizard, but I think its the same there.
Comment 1 Stefan Gohmann univentionstaff 2013-11-25 15:34:21 CET
I think it should be fixed for 3.1 and 3.2.
Comment 2 Florian Best univentionstaff 2013-11-27 08:31:12 CET
*** Bug 31570 has been marked as a duplicate of this bug. ***
Comment 3 Dirk Wiesenthal univentionstaff 2013-12-03 14:26:48 CET
subMatch of LDAP_Filter.forAll was used, not fullMatch. Fixed in

ucs-school-3.2:
  ucs-school-umc-wizards 4.0.0-2.77.201312031333
ucsschool-3.1-R2:
  ucs-school-umc-wizards 3.0.1-2.78.201312031338

This was also a problem for mailPrimaryAddress, class' name, computer's name, computer's IP. Fixed those, too.
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2014-01-23 15:37:28 CET
OK: wizard behaviour
    (username, classname, mailPrimaryAddress, computername, computer IP address)
OK: code change
??: is has to be checked if a changelog is necessary
Comment 5 Sönke Schwardt-Krummrich univentionstaff 2014-02-07 13:48:33 CET
UCS@school 3.1 R2-3 has been released:
http://download.univention.de/doc/release-notes-ucsschool-3.1-rev2-3.pdf

If this error occurs again, please use "Clone This Bug".