Bug 40986 - Unclear that login at UMC needs to be done as user "Administrator" with the same password as root
Unclear that login at UMC needs to be done as user "Administrator" with the s...
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.2-0-errata
Assigned To: Florian Best
Johannes Keiser
:
: 33248 39046 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-04-04 14:14 CEST by Alexander Kläser
Modified: 2017-06-15 17:57 CEST (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.309
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2016030521001602, 2016021621000541, 2015112121000024, 2016032421000185, 2015072921000607, 2016052721000738, 2016060521000116, 2016060321000183, 2016071821000126, 2016071721000459, 2016092921000736, 2017012621000291, 2017020921000365, 2017042621000632
Bug group (optional): External feedback, Usability
Max CVSS v3 score:


Attachments
Mockup of login page (63.63 KB, image/png)
2017-02-08 10:44 CET, Alexander Kläser
Details
Screenshot (192.98 KB, image/png)
2017-05-18 18:26 CEST, Florian Best
Details
Login on Firefox >= 52 with insecure connection (28.10 KB, image/png)
2017-05-23 13:00 CEST, Johannes Keiser
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Kläser univentionstaff 2016-04-04 14:14:39 CEST
We have already improved some aspects in order to guide the user at the first login using "Administrator" as user, however, we still receive feedback that testers had trouble logging in:
Ticket#2016030521001602
Ticket#2016021621000541
Ticket#2015112121000024 
Ticket#2016032421000185

+++ This bug was initially created as a clone of Bug #37804 +++

At the following review, the tester initially did not know with which user he should login to UMC:

http://linuxdenken.de/test-univention-4-0-1/

Certainly helpful would be a hint to login as user "Administrator" when visitting the UMC login for the first time.
Comment 1 Alexander Kläser univentionstaff 2016-04-06 10:54:40 CEST
See also Ticket#2015072921000607
Comment 2 Alexander Kläser univentionstaff 2016-04-06 10:55:11 CEST
*** Bug 39046 has been marked as a duplicate of this bug. ***
Comment 3 Alexander Kläser univentionstaff 2016-06-02 10:00:16 CEST
See also Ticket#2016052721000738
Comment 4 Alexander Kläser univentionstaff 2016-06-06 12:09:25 CEST
Reported again at Ticket#2016060521000116
Comment 5 Stefan Gohmann univentionstaff 2016-06-13 07:46:49 CEST
Reported again at Ticket#2016060321000183
Comment 6 Alexander Kläser univentionstaff 2016-08-01 11:18:49 CEST
Reported again: Ticket#2016071821000126
Comment 7 Alexander Kläser univentionstaff 2016-08-01 11:19:45 CEST
Reported again: Ticket#2016071721000459
Comment 8 Stefan Gohmann univentionstaff 2016-10-10 16:48:48 CEST
Once again: Ticket #2016092921000736
Comment 9 Stefan Gohmann univentionstaff 2017-02-02 07:14:55 CET
Once again Ticket#2017012621000291:

FEEDBACK: role and password policy have not been clear during setup.
after rebooting the graphical user interface came up (great!), but neither "admin" nor "root" worked.
- no hint on using "Administrator" instead of "admin"
- ssh to the IP, using root and looking up /etc/passwd didn't show the "Administrator"
- creating a new admin (nAdmin) and making nAdmin a superuser didn't help
- finally using the root password (worked on ssh!) for "Administrator" did the trick
-> very, very annoying and only few seconds before scrapping it and going to Zentyal
Comment 10 Alexander Kläser univentionstaff 2017-02-08 10:44:22 CET
Created attachment 8411 [details]
Mockup of login page

Attached the current mockup of the login page... I guess putting the text "Login for the first time?" with an additional help tooltip when clicking on it should help here.
Comment 11 Alexander Kläser univentionstaff 2017-02-08 10:44:59 CET
(In reply to Alexander Kläser from comment #10)
> Created attachment 8411 [details]
> Mockup of login page
> 
> Attached the current mockup of the login page... I guess putting the text
> "Login for the first time?" with an additional help tooltip when clicking on
> it should help here.

Or "How do I login?" as used in the mockup.
Comment 12 Erik Damrose univentionstaff 2017-02-08 10:57:05 CET
Idea: Prefill the username textbox with Administrator, as long as the Administrator has never successfully logged in at this machine
Comment 13 Florian Best univentionstaff 2017-02-09 17:07:53 CET
*** Bug 33248 has been marked as a duplicate of this bug. ***
Comment 14 Stefan Gohmann univentionstaff 2017-02-14 16:46:33 CET
Reported again, I've increased the impact because I'm unsure if everyone finds the solution. Ticket #2017020921000365
Comment 15 Florian Best univentionstaff 2017-02-16 16:10:24 CET
We should phrase a good sentence here, which also considers
* that some people use root which might be wrong
* root needs to be used for the initial system configuration
* the default username for managing the domain is Administrator (or the translated version in french)
Comment 16 Alexander Kläser univentionstaff 2017-03-06 16:15:14 CET
With UCS 4.2-0, the login page has been changed substantially. Let's wait whether this problem persists.
Comment 17 Florian Best univentionstaff 2017-04-18 10:34:04 CEST
Another feedback:
"""
I must say the UCS server installation and usage was incredibly easy— once I fixed a couple of initial misunderstanding:

    The administrative account is “Administrator” — not “root”
"""
https://itsfoss.com/univention-corporate-server/
Comment 18 Florian Best univentionstaff 2017-04-27 10:57:54 CEST
FEEDBACK: Benutzername für Administrator verwirrend. Man legt ROOT Benuter aber keine Administrator ein. Oder wäre ein Hinweis das gleiche Passwort für Administrator gültig oder auch ein anderes PAsswort eingeben.
Comment 19 Florian Best univentionstaff 2017-05-18 18:26:53 CEST
Created attachment 8865 [details]
Screenshot

(In reply to Florian Best from comment #18)
> FEEDBACK: Benutzername für Administrator verwirrend. Man legt ROOT Benuter
> aber keine Administrator ein. Oder wäre ein Hinweis das gleiche Passwort für
> Administrator gültig oder auch ein anderes PAsswort eingeben.

I am unsure about this feedback because we are saying twice in the system setup dialog that the password is for the user root and Administrator. Maybe the sentence can still be improved?
Comment 20 Florian Best univentionstaff 2017-05-18 18:27:08 CEST
When entering "root" in the login dialog a pop up is now shown which informs about the Administrator account.
The "Administrator" string is also taken from default_username() so that french systems or systems in AD domains show the correct username.

univention-management-console.yaml:
r79437 | YAML Bug #40986

univention-management-console (9.0.80-42):
r79436 | Bug #40986: display tooltip about Administrator user when entering root as username into the login dialog
Comment 21 Florian Best univentionstaff 2017-05-18 18:39:10 CEST
Do you think a sentence that the password is the same as the one for root is required?
Comment 22 Johannes Keiser univentionstaff 2017-05-23 13:00:57 CEST
Created attachment 8874 [details]
Login on Firefox >= 52 with insecure connection

Tested with following browsers:
    IE 11       -> OK
    EDGE 14     -> OK
    Safari 9.1  -> OK
    Mobile (iPhone 6S, Galaxy S6) -> OK
    Firefox 53  -> beginning with version 52 Firefox shows a native tooltip if an insecure connection is used for logins. That message covers the UMC tooltip. Is this a problem?
    

I think a sentence that the Administrator password is the same as the root password could be helpful since ~35% of the Tickets either think the password in the system setup is only for root or say that a hint that the Administrator password is the same as the root password would have been helpful.
Comment 23 Florian Best univentionstaff 2017-05-23 15:58:17 CEST
I put the tooltip above the input field and changed the sentence into:

+msgid "The default user to manage the domain is %s which has the same initial password as the <i>root</i> account."
+msgstr "Der Standardbenutzer zum Verwalten dieser Domäne ist %s mit demselben initialen Passwort des <i>root</i> Benutzers."

univention-management-console (9.0.80-43):
r79582 | Bug #40986: improove tooltip position and add hint about Administrator password
Comment 24 Johannes Keiser univentionstaff 2017-05-24 17:03:40 CEST
(In reply to Florian Best from comment #23)
> I put the tooltip above the input field and changed the sentence into:
> 
> +msgid "The default user to manage the domain is %s which has the same
> initial password as the <i>root</i> account."
> +msgstr "Der Standardbenutzer zum Verwalten dieser Domäne ist %s mit
> demselben initialen Passwort des <i>root</i> Benutzers."
> 
> univention-management-console (9.0.80-43):
> r79582 | Bug #40986: improove tooltip position and add hint about
> Administrator password

Changes OK
YAML    OK

-> verified
Comment 25 Janek Walkenhorst univentionstaff 2017-06-15 17:57:51 CEST
<http://errata.software-univention.de/ucs/4.2/40.html>