Univention Bugzilla – Bug 35882
UCS-4.0: 00_base/90change_user_pwd_via_udm fails with "No permission -- see authorization schemes"
Last modified: 2016-10-05 20:19:31 CEST
*** 00_base/90change_user_pwd_via_udm *** Checking if the UCR-Variable ldap/acl/user/password/change works *** Changing 'ldap/acl/user/password/change' to yes Setting ldap/acl/user/password/change Multifile: /etc/ldap/slapd.conf Restarting ldap server(s). Stopping ldap server(s): slapd ...done. Starting ldap server(s): slapd ...done. Checking Schema ID: ...done. Creating container/cn object with {'position': 'dc=autotest090,dc=local', 'name': '3qx0l3evp5'} Waiting for replication: OK: replication complete (nid=770 lid=770) Done: replication complete. Creating policies/umc object with {'name': 'fcvf53xad8', 'allow': 'cn=udm-self,cn=operations,cn=UMC,cn=univention,dc=autotest090,dc=local'} Waiting for replication: OK: replication complete (nid=771 lid=771) Done: replication complete. Modifying container/cn object with {'dn': 'cn=3qx0l3evp5,dc=autotest090,dc=local', 'policy-reference': 'cn=fcvf53xad8,dc=autotest090,dc=local'} Waiting for replication: OK: replication complete (nid=773 lid=773) Done: replication complete. Creating users/user object with {'username': 'abcqycq7l5', 'position': 'cn=3qx0l3evp5,dc=autotest090,dc=local', 'password': '35c6jhzj7v', 'firstname': 'gn2rd9slzk', 'lastname': 'abcqycq7l5'} Waiting for replication: OK: replication complete (nid=784 lid=784) Done: replication complete. Cleanup after exception: <class 'httplib.HTTPException'> localhost: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} Performing UCSTestUDM cleanup... UCSTestUDM cleanup done Setting ldap/acl/user/password/change Multifile: /etc/ldap/slapd.conf Traceback (most recent call last): File "90change_user_pwd_via_udm", line 77, in <module> connection = UMCConnection('localhost', user_name, user_password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 52, in __init__ self.auth(username, password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: localhost: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '10_umc-service-list'] *** *** 60_umc-system/10_umc-service-list *** Test the output of the UMC service module *** ### FAIL ### Failed to authenticate, hostname 'master090' : master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} ### ### *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '20_umc-service-autostart'] *** *** 60_umc-system/20_umc-service-autostart *** Test the UMC service module autostart behaviour *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "20_umc-service-autostart", line 130, in <module> sys.exit(TestUMC.main('nscd')) # tesing 'Name Service Caching Daemon' File "20_umc-service-autostart", line 118, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '21_umc-service-proc-handling'] *** *** 60_umc-system/21_umc-service-proc-handling *** Test the UMC service module process handling *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "21_umc-service-proc-handling", line 246, in <module> sys.exit(TestUMC.main()) File "21_umc-service-proc-handling", line 224, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '22_umc-service-proc-killing'] *** *** 60_umc-system/22_umc-service-proc-killing *** Test the UMC backend process killing *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "22_umc-service-proc-killing", line 130, in <module> sys.exit(TestUMC.main()) File "22_umc-service-proc-killing", line 116, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '23_umc-service-create-user'] *** *** 60_umc-system/23_umc-service-create-user *** Test the UMC user creation, modification and deletion *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "23_umc-service-create-user", line 196, in <module> sys.exit(TestUMC.main()) File "23_umc-service-create-user", line 127, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '24_umc-service-create-group'] *** *** 60_umc-system/24_umc-service-create-group *** Test the UMC group creation, modification and deletion *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "24_umc-service-create-group", line 150, in <module> sys.exit(TestUMC.main()) File "24_umc-service-create-group", line 105, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 *** *** BEGIN *** ['/usr/bin/python', '30_umc-service-user-modules'] ***
*** BEGIN *** ['/usr/bin/python', '30_umc-service-user-modules'] *** *** 60_umc-system/30_umc-service-user-modules *** Test the UMC modules access for restricted users *** Creating a test group and a user in it for the test Creating groups/group object with {'position': 'cn=groups,dc=autotest090,dc=local', 'name': 'umc_test_group_aqnoab'} Waiting for replication: OK: replication complete (nid=8797 lid=8797) Done: replication complete. Creating users/user object with {'username': 'umc_test_user_nuwywo', 'firstname': 'u5zeubigov', 'lastname': 'h1dhyjwfom', 'primaryGroup': 'cn=umc_test_group_aqnoab,cn=groups,dc=autotest090,dc=local', 'position': 'cn=users,dc=autotest090,dc=local', 'password': 'univention'} Waiting for replication: OK: replication complete (nid=8808 lid=8808) Done: replication complete. Checking if user 'umc_test_user_nuwywo' has no access to umc modules Cleanup after exception: <class 'httplib.HTTPException'> master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} Performing UCSTestUDM cleanup... UCSTestUDM cleanup done Traceback (most recent call last): File "30_umc-service-user-modules", line 144, in <module> sys.exit(TestUMC.main()) File "30_umc-service-user-modules", line 91, in main self.create_user_umc_connection(test_username, test_password) File "30_umc-service-user-modules", line 31, in create_user_umc_connection password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 52, in __init__ self.auth(username, password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '31_umc-service-user-authentication'] *** *** 60_umc-system/31_umc-service-user-authentication *** Test the UMC user authentication and password change *** Creating a group 'umc_test_group_q3fisb' and a user 'umc_test_user_aoaq1i' in it for the test: Creating groups/group object with {'position': 'cn=groups,dc=autotest090,dc=local', 'name': 'umc_test_group_q3fisb'} Waiting for replication: OK: replication complete (nid=8819 lid=8819) Done: replication complete. Creating users/user object with {'username': 'umc_test_user_aoaq1i', 'firstname': 'terghz420z', 'lastname': 'jxa7mspwfo', 'primaryGroup': 'cn=umc_test_group_q3fisb,cn=groups,dc=autotest090,dc=local', 'position': 'cn=users,dc=autotest090,dc=local', 'password': 'univention'} Waiting for replication: OK: replication complete (nid=8830 lid=8830) Done: replication complete. Creating a custom policy 'umc_test_policy_iukzhh' with 'udm-self' operation set for the test and adding it to the test group 'umc_test_group_q3fisb': Creating policies/umc object with {'name': 'umc_test_policy_iukzhh', 'allow': ['cn=udm-self,cn=operations,cn=UMC,cn=univention,dc=autotest090,dc=local']} Waiting for replication: OK: replication complete (nid=8831 lid=8831) Done: replication complete. Modifying groups/group object with {'dn': 'cn=umc_test_group_q3fisb,cn=groups,dc=autotest090,dc=local', 'policy-reference': 'cn=umc_test_policy_iukzhh,dc=autotest090,dc=local'} Waiting for replication: OK: replication complete (nid=8833 lid=8833) Done: replication complete. Saving initial UCR user's password change setting Allowing user password change in the UCR: Setting ldap/acl/user/password/change Multifile: /etc/ldap/slapd.conf Restarting the LDAP Server... Trying to authenticate to UMC with username 'umc_test_user_aoaq1i' and a random password: Response Code: 401 Response Cookie: None Response Message: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} Trying to authenticate to UMC with username 'umc_test_user_aoaq1i' and a valid initial password 'univention': Response Code: 401 Response Cookie: None Response Message: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} ### FAIL ### Authentication with a valid 'username'=umc_test_user_aoaq1i and 'password'=univention failed. ### ### Restoring initial UCR user password setting: Setting ldap/acl/user/password/change Multifile: /etc/ldap/slapd.conf Restarting the LDAP Server... Cleanup after exception: <type 'exceptions.SystemExit'> 1 Performing UCSTestUDM cleanup... UCSTestUDM cleanup done *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '50_umc-service-quotas-management'] *** *** 60_umc-system/50_umc-service-quotas-management *** Test the UMC file quota module *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "50_umc-service-quotas-management", line 265, in <module> sys.exit(TestUMC.main()) File "50_umc-service-quotas-management", line 188, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '60_umc-service-extended-attributes'] *** *** 60_umc-system/60_umc-service-extended-attributes *** Test the UMC extended attributes *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "60_umc-service-extended-attributes", line 370, in <module> sys.exit(TestUMC.main()) File "60_umc-service-extended-attributes", line 249, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '70_umc-service-network-functionality'] *** *** 60_umc-system/70_umc-service-network-functionality *** Test the UMC network functionality *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "70_umc-service-network-functionality", line 393, in <module> sys.exit(TestUMC.main()) File "70_umc-service-network-functionality", line 356, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '80_umc-service-license'] *** *** 60_umc-system/80_umc-service-license *** Test the UMC license management *** An HTTPException while trying to authenticate to UMC: HTTPException('master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"}',) Waiting 5 seconds and making another attempt Traceback (most recent call last): File "80_umc-service-license", line 581, in <module> sys.exit(TestUMC.main()) File "80_umc-service-license", line 554, in main self.create_connection_authenticate() File "./TestUMCSystemModule.py", line 64, in create_connection_authenticate self.Connection.auth(self.username, self.password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: master090: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '04_policies'] *** *** 60_umc/04_policies *** Test UMC policy result *** Creating settings/umc_operationset object with {'position': 'cn=operations,cn=UMC,cn=univention,dc=autotest090,dc=local', 'operation': ['udm/object/policies'], 'name': 'test-umc-opset', 'flavor': 'navigation', 'description': 'policy resWaiting for replication: OK: replication complete (nid=8895 lid=8895) Done: replication complete. Creating policies/umc object with {'position': 'cn=UMC,cn=policies,dc=autotest090,dc=local', 'name': 'test-umc-policy', 'allow': 'cn=test-umc-opset,cn=operations,cn=UMC,cn=univention,dc=autotest090,dc=local'} Waiting for replication: OK: replication complete (nid=8896 lid=8896) Done: replication complete. Creating users/user object with {'username': 't46q3esp9q', 'firstname': 'idxtlgxmmf', 'lastname': 'gdy4b2p7pc', 'policy-reference': 'cn=test-umc-policy,cn=UMC,cn=policies,dc=autotest090,dc=local', 'position': 'cn=users,dc=autotest090,dc Waiting for replication: OK: replication complete (nid=8909 lid=8909) Done: replication complete. Creating policies/registry object with {'position': 'cn=policies,dc=autotest090,dc=local', 'registry': 'baz 2', 'name': 'test-container-ucr-policy'} Waiting for replication: OK: replication complete (nid=8910 lid=8910) Done: replication complete. Creating policies/registry object with {'position': 'cn=policies,dc=autotest090,dc=local', 'name': 'test-computer-ucr-policy', 'append': {'registry': ['baz 3', 'bar 4']}} Waiting for replication: OK: replication complete (nid=8911 lid=8911) Done: replication complete. Creating policies/registry object with {'position': 'cn=policies,dc=autotest090,dc=local', 'registry': 'foo 1', 'name': 'test-root-ucr-policy'} Waiting for replication: OK: replication complete (nid=8912 lid=8912) Done: replication complete. Creating policies/registry object with {'position': 'cn=policies,dc=autotest090,dc=local', 'name': 'test-various-ucr-policy', 'append': {'registry': ['foo 0', 'bar 5']}} Waiting for replication: OK: replication complete (nid=8913 lid=8913) Done: replication complete. Creating container/cn object with {'position': 'dc=autotest090,dc=local', 'name': 'root'} Waiting for replication: OK: replication complete (nid=8914 lid=8914) Done: replication complete. Creating container/cn object with {'position': 'cn=root,dc=autotest090,dc=local', 'name': 'computers2'} Waiting for replication: OK: replication complete (nid=8915 lid=8915) Done: replication complete. Creating computers/domaincontroller_slave object with {'position': 'cn=computers2,cn=root,dc=autotest090,dc=local', 'name': 'ursy1kwm1h'} Waiting for replication: CRITICAL: no change of listener transaction id for last 0 checks (nid=8925 lid=8920) OK: replication complete (nid=8925 lid=8925) Done: replication complete. Modifying container/cn object with {'dn': 'cn=root,dc=autotest090,dc=local', 'policy-reference': 'cn=test-root-ucr-policy,cn=policies,dc=autotest090,dc=local'} Waiting for replication: OK: replication complete (nid=8927 lid=8927) Done: replication complete. Cleanup after exception: <class 'httplib.HTTPException'> localhost: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} Performing UCSTestUDM cleanup... UCSTestUDM cleanup done Traceback (most recent call last): File "04_policies", line 214, in <module> main() File "04_policies", line 143, in main get_policy_result_new(container_dn), File "04_policies", line 24, in get_policy_result_new return get_policy_result(None, policyDN, container) File "04_policies", line 36, in _decorated UMCC.auth(USERNAME, PASSWORD) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: localhost: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***
*** BEGIN *** ['/usr/bin/python', '05_get_client_ip_address'] *** *** 60_umc/05_get_client_ip_address *** Check if UMC is able to return correct IP address *** *** Entering with-statement of NetworkRedirector() *** Check with different remote addresses *** Adding network loop (1.2.3.4 <--> 4.3.2.1) *** ['/sbin/iptables', '-t', 'mangle', '-A', 'OUTPUT', '-d', '1.2.3.4', '-j', 'TOS', '--set-tos', '0x04'] *** ['/sbin/iptables', '-t', 'nat', '-A', 'OUTPUT', '-d', '1.2.3.4', '-j', 'DNAT', '--to-destination', '10.210.76.83'] *** ['/sbin/iptables', '-t', 'nat', '-A', 'POSTROUTING', '-m', 'tos', '--tos', '0x04', '-j', 'SNAT', '--to-source', '4.3.2.1'] *** ['/sbin/iptables', '-t', 'mangle', '-A', 'OUTPUT', '-d', '4.3.2.1', '-j', 'TOS', '--set-tos', '0x08'] *** ['/sbin/iptables', '-t', 'nat', '-A', 'OUTPUT', '-d', '4.3.2.1', '-j', 'DNAT', '--to-destination', '10.210.76.83'] *** ['/sbin/iptables', '-t', 'nat', '-A', 'POSTROUTING', '-m', 'tos', '--tos', '0x08', '-j', 'SNAT', '--to-source', '1.2.3.4'] *** Leaving with-statement of NetworkRedirector() *** NetworkRedirector.revert_network_settings() *** Removing network loop (1.2.3.4 <--> 4.3.2.1) *** ['/sbin/iptables', '-t', 'mangle', '-D', 'OUTPUT', '-d', '1.2.3.4', '-j', 'TOS', '--set-tos', '0x04'] *** ['/sbin/iptables', '-t', 'nat', '-D', 'OUTPUT', '-d', '1.2.3.4', '-j', 'DNAT', '--to-destination', '10.210.76.83'] *** ['/sbin/iptables', '-t', 'nat', '-D', 'POSTROUTING', '-m', 'tos', '--tos', '0x04', '-j', 'SNAT', '--to-source', '4.3.2.1'] *** ['/sbin/iptables', '-t', 'mangle', '-D', 'OUTPUT', '-d', '4.3.2.1', '-j', 'TOS', '--set-tos', '0x08'] *** ['/sbin/iptables', '-t', 'nat', '-D', 'OUTPUT', '-d', '4.3.2.1', '-j', 'DNAT', '--to-destination', '10.210.76.83'] *** ['/sbin/iptables', '-t', 'nat', '-D', 'POSTROUTING', '-m', 'tos', '--tos', '0x08', '-j', 'SNAT', '--to-source', '1.2.3.4'] Traceback (most recent call last): File "05_get_client_ip_address", line 43, in <module> main() File "05_get_client_ip_address", line 30, in main result = get_ip_address('1.2.3.4', username, password) File "05_get_client_ip_address", line 15, in get_ip_address connection.auth(username, password) File "/usr/lib/pymodules/python2.7/univention/lib/umc_connection.py", line 106, in auth raise HTTPException(error_message) httplib.HTTPException: 1.2.3.4: Authentication failed: {"status": "401 Unauthorized", "message": "No permission -- see authorization schemes"} *** END *** 1 ***