Bug 41530 - 41password_change test case fails in S3 environments
41password_change test case fails in S3 environments
Status: CLOSED DUPLICATE of bug 41207
Product: UCS Test
Classification: Unclassified
Component: Samba
unspecified
Other Linux
: P5 normal (vote)
: ---
Assigned To: Florian Best
Philipp Hahn
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-06-10 16:52 CEST by Stefan Gohmann
Modified: 2016-09-29 17:14 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2016-06-10 16:52:26 CEST
The test case 41password_change fails in S3 environments since 2016-05-24:
http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-2/job/AutotestJoin/25/SambaVersion=s3,Systemrolle=master/testReport/

*** BEGIN *** ['/bin/bash', '41password_change'] ***
*** 50_samba/41password_change *** Testing password change with udm and samba ***
*** START TIME: 2016-06-10 04:43:13 ***
----create user
info 2016-06-10 04:43:14	 create user hen1huik
Object created: uid=hen1huik,cn=users,dc=autotest090,dc=local
debug 2016-06-10 04:43:15	 Waiting for replication...
OK: replication complete (nid=12296 lid=12296)
info 2016-06-10 04:43:15	 replication complete.
----test normal connection with smbclient
Domain=[AUTOTEST090] OS=[Windows 6.1] Server=[Samba 4.3.7-Debian]
Domain=[AUTOTEST090] OS=[Windows 6.1] Server=[Samba 4.3.7-Debian]
----changing the password with net rpc user
net rpc user password "hen1huik" "GoKg2HSH1AÄÜÖ" -U"Administrator%univention" -S "master090.autotest090.local"
Failed to set password for 'hen1huik' with error: The semaphore time-out period has expired..
error 2016-06-10 04:43:39	 net rpc user password change returned a non-zero exit code: 0. Continuing anyway, see Bug #31794
debug 2016-06-10 04:43:39	 Waiting for replication...
OK: replication complete (nid=12296 lid=12296)
----test login with udm with new password
info 2016-06-10 04:43:39	 replication complete.
authentication error: Authentication failed
error 2016-06-10 04:44:11	 Could not authenticate with UDM after password change with smbpasswd.
----change the password with udm
error 2016-06-10 04:44:11	 **************** Test failed above this line (1) ****************
debug 2016-06-10 04:44:12	 Waiting for replication...
OK: replication complete (nid=12297 lid=12297)
----test login with smbclient with new password
info 2016-06-10 04:44:12	 replication complete.
Domain=[AUTOTEST090] OS=[Windows 6.1] Server=[Samba 4.3.7-Debian]
Domain=[AUTOTEST090] OS=[Windows 6.1] Server=[Samba 4.3.7-Debian]
info 2016-06-10 04:44:13	 remove user hen1huik
Object removed: uid=hen1huik,cn=users,dc=autotest090,dc=local
debug 2016-06-10 04:44:13	 user hen1huik removed
info 2016-06-10 04:44:13	 checking whether the user hen1huik is really removed
debug 2016-06-10 04:44:13	 user hen1huik does not exist
*** END TIME: 2016-06-10 04:44:13 ***
*** TEST DURATION (H:MM:SS.ms): 0:01:00.439887 ***
*** END *** 1 ***
Comment 1 Stefan Gohmann univentionstaff 2016-06-10 17:17:11 CEST
This seems to be a regression in the latest UDM changes:

root@master711:~# udm users/user create --set username=test1 --set lastname=Test1 --set password=univention
Object created: uid=test1,dc=deadlock71,dc=intranet
root@master711:~# grep 'passwd program ' /etc/samba/smb.conf
        passwd program = /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,dc=deadlock71,dc=intranet" --pwdfile "/etc/ldap.secret" --user "%u"
root@master711:~# /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,dc=deadlock71,dc=intranet" --pwdfile "/etc/ldap.secret" --user "test1"
New password Univention99
Re-enter new password Univention99
passwd error: Object class violation: attribute 'sambaAcctFlags' not allowed
root@master711:~#
Comment 2 Florian Best univentionstaff 2016-06-13 07:24:03 CEST
univention-directory-manager-modules (11.0.3-8):
r70097 | Bug #41207, Bug #41530: fix univention-passwd to not remove samba object class

univention-passwd contained an evil hack which removed the (not-editable) option 'samba' from the object to make sure no samba related attributes were changed.
The new code which ensures the consistency of the object classes has been moved into an own method which is now overwritten in univention-passwd.

*** This bug has been marked as a duplicate of bug 41207 ***
Comment 3 Philipp Hahn univentionstaff 2016-06-14 12:45:20 CEST
OK: r70097
OK:
 # udm users/user create --set lastname=unix --set username=unix --set password=univention --option posix
 # printf 'test1234\ntest1234\n' | /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,$(ucr get ldap/base)" --pwdfile "/etc/ldap.secret" --user unix 
 # udm users/user create --set lastname=samba --set username=samba --set password=univention --option posix --option samba
 # printf 'test1234\ntest1234\n' | /usr/share/univention-admin-tools/univention-passwd --binddn "cn=admin,$(ucr get ldap/base)" --pwdfile "/etc/ldap.secret" --user samba