Description Daniel Tröder 2016-07-21 18:46:17 CEST

Under certain circumstances a code path in univention/admin/locking.py is used, that uses wrong arguments to univention.uldap.access.add()


/usr/lib/pymodules/python2.7/ucsschool/lib/models/base.pyc in create(self, lo, validate)
    415 		'''
    416                 self.call_hooks('pre', 'create')
--> 417                 success = self.create_without_hooks(lo, validate)
    418                 if success:
    419                         self.call_hooks('post', 'create')

/usr/lib/pymodules/python2.7/ucsschool/lib/models/base.pyc in create_without_hooks(self, lo, validate)
    441 
    442                         # here is the real logic
--> 443                         self.do_create(udm_obj, lo)
    444 
    445                         # get it fresh from the database (needed for udm_obj._exists ...)

/usr/lib/pymodules/python2.7/ucsschool/lib/models/user.pyc in do_create(self, udm_obj, lo)
    245                 if script_path is not None:
    246                         udm_obj['scriptpath'] = script_path
--> 247                 success = super(User, self).do_create(udm_obj, lo)
    248                 if password_created:
    249                         # to not show up in host_hooks

/usr/lib/pymodules/python2.7/ucsschool/lib/models/base.pyc in do_create(self, udm_obj, lo)
    458 		'''
    459                 self._alter_udm_obj(udm_obj)
--> 460                 udm_obj.create()
    461 
    462         def modify(self, lo, validate=True, move_if_necessary=None):

/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.pyc in create(self)
    293                         raise univention.admin.uexceptions.insufficientInformation
    294 
--> 295                 return self._create()
    296 
    297         def modify(self, modify_childs=1,ignore_license=0):

/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.pyc in _create(self)
    677                 self._call_checkLdap_on_all_property_syntaxes()
    678 
--> 679                 al = self._ldap_addlist()
    680                 al.extend(self._ldap_modlist())
    681                 m = univention.admin.modules.get(self.module)

/usr/lib/pymodules/python2.7/univention/admin/handlers/users/user.pyc in _ldap_addlist(self)
   1752                                                 return []
   1753                         try:
-> 1754                                 uid=univention.admin.allocators.request(self.lo, self.position, 'uid', value=self['username'])
   1755                                 if 'posix' in self.options:
   1756                                         if self['unixhome'] == '/home/%s' % self.old_username:

/usr/lib/pymodules/python2.7/univention/admin/allocators.pyc in request(lo, position, type, value)
    190         if type in ('uidNumber', 'gidNumber'):
    191                 return acquireRange(lo, position, type, _type2attr[type], [{'first': 1000, 'last': 55000}, {'first': 65536, 'last': 1000000}], scope=_type2scope[type])
--> 192         return acquireUnique(lo, position, type, value, _type2attr[type], scope=_type2scope[type])
    193 
    194 

/usr/lib/pymodules/python2.7/univention/admin/allocators.pyc in acquireUnique(lo, position, type, value, attr, scope)
    168                         return value
    169         elif type in ['groupName', 'uid'] and configRegistry.is_true('directory/manager/user_group/uniqueness', True):
--> 170                 univention.admin.locking.lock(lo, position, type, value, scope=scope)
    171                 if not lo.searchDn(base=searchBase, filter=filter_format('(|(&(cn=%s)(|(objectClass=univentionGroup)(objectClass=sambaGroupMapping)(objectClass=posixGroup)))(uid=%s))', (value, value))):
    172                         univention.debug.debug(univention.debug.ADMIN, univention.debug.INFO, 'ALLOCATE return %s'% value)

/usr/lib/pymodules/python2.7/univention/admin/locking.pyc in lock(lo, position, type, value, scope, timeout)
     70         if not lo.get(dn, ['lockTime']):
     71                 try:
---> 72                         lo.add(dn, al, exceptions=0)
     73                         return locktime
     74                 except ldap.ALREADY_EXISTS:

TypeError: add() got an unexpected keyword argument 'exceptions'