Bug 44382 - The initialization of the module failed: INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}
Summary: The initialization of the module failed: INVALID_CREDENTIALS: {'desc': 'Inval...
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
Version: UCS 4.2
Hardware: Other Linux
: P5 major
Target Milestone: UCS 4.2-2-errata
Assignee: Florian Best
QA Contact: Stefan Gohmann
URL: https://groups.google.com/forum/#!top...
Keywords:
: 38854 40127 40505 42370 45223 45438 (view as bug list)
Depends on: 44912
Blocks: 44621 45438
  Show dependency tree / graph
 
Reported: 2017-04-18 11:27 CEST by Florian Best
Modified: 2018-10-04 13:44 CEST (History)
8 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 3: Will affect average number of installed domains
How will those affected feel about the bug?: 4: A User would return the product
User Pain: 0.343
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2017082321000461, 2017041821000022, 2017040821000032, 2017040921000174, 2017041821000371, 2017041821000568, 2017050321000174, 2017050521000269, 2017051621000613, 2017051521000044, 2017051721000013, 2017051721000041, 2017051721000371, 2017051721000381
Bug group (optional): External feedback, Usability
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2017-04-18 11:27:40 CEST 
Version: 4.2-0 errata0 (Lesum)

Traceback(2f3ef65aec439efd21b19f22fa444fab):
Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 290, in handle
    self.__handler.init()
  File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 157, in init
    self.settings = UDM_Settings()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 886, in __init__
    self.read()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 889, in read
    self._read_directories()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 88, in _decorated
    return method(*args, **kwargs)
  File "%PY2.7%/univention/management/console/ldap.py", line 140, in _decorated
    kwargs[loarg], kwargs[poarg] = lo, po = getter()
  File "%PY2.7%/univention/management/console/ldap.py", line 130, in getter
    conn = connection()
  File "%PY2.7%/univention/management/console/ldap.py", line 53, in connection
    bind(lo)
  File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 173, in bind_user_connection
    super(Instance, self).bind_user_connection(lo)
  File "%PY2.7%/univention/management/console/base.py", line 353, in bind_user_connection
    lo.lo.bind(self._user_dn, self._password)
  File "%PY2.7%/univention/uldap.py", line 165, in bind
    self.lo.simple_bind_s(self.binddn, self.__encode_pwd(self.bindpw))
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 879, in simple_bind_s
    res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 860, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 215, in simple_bind_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
INVALID_CREDENTIALS: The initialization of the module failed
Comment 1 Florian Best univentionstaff 2017-04-18 11:32:55 CEST 
Version: 4.2-0 errata0 (Lesum)
Comment 3 Florian Best univentionstaff 2017-04-18 11:38:13 CEST 
Version: 4.2-0 errata0 (Lesum)

Remark: Hallo Support,
das Test-System mit dem ich UCS 4.2 testen möchte, erhält keine Lizenz.
Comment 4 Florian Best univentionstaff 2017-04-18 11:41:39 CEST 
Version: 4.2-0 errata0 (Lesum)
Comment 5 Florian Best univentionstaff 2017-04-21 15:37:20 CEST 
Version: 4.2-0 errata1 (Lesum)
Comment 6 Florian Best univentionstaff 2017-05-05 14:45:39 CEST 
Version: 4.2-0 errata4 (Lesum)
Comment 7 Florian Best univentionstaff 2017-05-05 14:51:31 CEST 
Version: 4.2-0 errata4 (Lesum)

Remark: Error occurs on opening of CUPS Printer dialog in web GUI.
Comment 11 Florian Best univentionstaff 2017-05-16 13:01:06 CEST 
#2017051621000613
#2017051521000053
#2017051521000044
#2017051221000602
#2017051121000551

Version: 4.2-0 errata15 (Lesum)
Remark: I have completed the installation using the ESX image, but I am getting an error when I am trying to import the license file.

Version: 4.2-0 errata4 (Lesum)
Remark: Aufruf von Benutzerübersicht
Comment 12 Florian Best univentionstaff 2017-05-17 15:46:24 CEST 
Version: 4.2-0 errata15 (Lesum)
Remark: DNS module error
Comment 13 Florian Best univentionstaff 2017-05-17 15:51:56 CEST 
I think we have a problem in the LDAP server itself here.

I have this problem every day on my xen3 system:
# strace -p $(pgrep -f slapd)
Process 6332 attached
futex(0x7f113a09c9d0, FUTEX_WAIT, 6333, NULL

After restarting slapd everything works until the next day.

Comment 2 has been split into Bug #44621.
Comment 14 Florian Best univentionstaff 2017-05-22 15:54:40 CEST 
A lot of other services are affected then, too. E.g:

May 22 15:22:49 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:22:54 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:22:59 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed
May 22 15:23:04 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:09 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:09 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:14 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:14 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed
May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:19 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed
May 22 15:23:19 xen3 named[25729]: zone 0.168.192.in-addr.arpa/IN: refresh: unexpected rcode (SERVFAIL) from master 127.0.0.1#7777 (source 0.0.0.0#0)
May 22 15:23:24 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:29 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': ldapdb_bind(): ldap_sasl_bind_s(ldp, 'cn=xen3,cn=dc,cn=computers,dc=school,dc=local', '<secret>') failed: Invalid credentials
May 22 15:23:34 xen3 named[25727]: LDAP sdb zone '0.168.192.in-addr.arpa': bind failed
Comment 15 Florian Best univentionstaff 2017-05-23 17:00:54 CEST 
Reported again, 4.2-0 errata15 (Lesum), #2017052221000031
Comment 16 Florian Best univentionstaff 2017-05-30 10:58:24 CEST 
Reported again, 4.2-0 errata25 (Lesum)
#2017052921000671
Comment 17 Florian Best univentionstaff 2017-06-02 14:23:28 CEST 
The regular ldap bind with the machine account works. The bind with Administrator doesn't work.
In my case - on a UCS as AD member system - this is because the Administrator's "userPassword" attribute is set to "{KINIT}".
"kinit Administrator" tells me that the clock is out of sync with the active directory server ("clock skew") and happens after I start the VM. But the VM then updates its time automatically after a short time - I think that I saw the same error even after the clock was already synced again (Not sure, have to proove it 100%).

So, I don't know what we can do? Masking the error/traceback? Might not be the best solution as we also have errors like Bug #44621.
Comment 18 Arvid Requate univentionstaff 2017-06-02 19:27:25 CEST 
Ok, then we should add a "rdate -n $kerberos_kdc" somewhere in the boot process? Or in the login process?
Comment 19 Florian Best univentionstaff 2017-06-12 12:30:22 CEST 
(In reply to Arvid Requate from comment #18)
> Ok, then we should add a "rdate -n $kerberos_kdc" somewhere in the boot
> process? Or in the login process?
No, I mean the time on the AD machine is wrong not the one on UCS side.

We have further feedback with a mail address here, I will ask for more details.
Comment 20 Florian Best univentionstaff 2017-06-12 14:07:57 CEST 
Version: 4.2-0 errata26 (Lesum)
2017060521000463
2017061121000041
2017060721000263
2017061121000157
2017061121000031

Remark: Fehler über Fehler,- Der Menüpunkt DNS lässt sich nicht aufrufen. Das Modul stürzt ab

Remark: Auch das Netzwerkmodul lässt sich nicht aufrufen. Auch hier stürzt das Modul zuverlässig zu 100% ab
Comment 22 Arvid Requate univentionstaff 2017-06-12 14:35:32 CEST 
> No, I mean the time on the AD machine is wrong not the one on UCS side.

If the UCS system is member of an AD domain, then by definition the time of the AD DC is authoritative.
Comment 23 Florian Best univentionstaff 2017-06-16 18:47:02 CEST 
4.2-0 errata29 (Lesum), #2017061221000941
Comment 24 Florian Best univentionstaff 2017-06-16 18:48:08 CEST 
4.2-0 errata29 (Lesum), #2017061321000617
Comment 25 Florian Best univentionstaff 2017-06-16 18:48:50 CEST 
4.2-0 errata29 (Lesum), #2017061321000635
Comment 26 Florian Best univentionstaff 2017-06-16 18:49:59 CEST 
4.2-0 errata29 (Lesum), #2017061521000471
Comment 27 Florian Best univentionstaff 2017-06-20 13:21:55 CEST 
Reported again, 4.2-0 errata52 (Lesum)
#2017061921000688

Remark: brand new install of UCS
Comment 28 Florian Best univentionstaff 2017-06-20 13:51:39 CEST 
Ticket #2017061921000688
Remark: I was trying to set up a back up active directory and I think this error occurred because I has also selected some applications to install including the domain controller. For the back up UCS  AD it would seem that you do not really install anything from that last section.
Comment 29 Florian Best univentionstaff 2017-07-17 14:23:32 CEST 
Version: 4.2-1 errata96 (Lesum)
#2017071521000399

Remark: What's happens? After the upgrade more and more failures
Comment 30 Florian Best univentionstaff 2017-07-21 12:02:13 CEST 
Reported again, 4.2-0 errata45 (Lesum)
Ticket#2017072021000263
Comment 31 Florian Best univentionstaff 2017-07-21 14:50:07 CEST 
I added temporary debug output and started the AD Member Jenkins job:

ucs-ec2-tools (3.0.3-1):
r81308 | Bug #44382: add temporary debug level of slapd
Comment 32 Florian Best univentionstaff 2017-07-26 12:08:09 CEST 
The problem in our AD Member Mode Jenkins tests is "unable to reach any KDC in realm ...".
Comment 33 Florian Best univentionstaff 2017-08-04 16:06:08 CEST 
Reported again, 4.2-1 errata52 (Lesum)
#2017073121000591
Comment 34 Florian Best univentionstaff 2017-08-21 11:18:36 CEST 
Version: 4.2-1 errata52 (Lesum)
#2017081921000013
Comment 35 Florian Best univentionstaff 2017-08-28 12:48:38 CEST 
This has probably to do with the SAML authentication.
Comment 36 Florian Best univentionstaff 2017-08-28 12:50:29 CEST 
*** Bug 38854 has been marked as a duplicate of this bug. ***
Comment 37 Florian Best univentionstaff 2017-08-28 12:50:45 CEST 
*** Bug 40505 has been marked as a duplicate of this bug. ***
Comment 38 Florian Best univentionstaff 2017-08-28 12:51:06 CEST 
*** Bug 40127 has been marked as a duplicate of this bug. ***
Comment 39 Florian Best univentionstaff 2017-08-28 12:51:27 CEST 
*** Bug 42370 has been marked as a duplicate of this bug. ***
Comment 40 Florian Best univentionstaff 2017-08-28 12:51:59 CEST 
*** Bug 45223 has been marked as a duplicate of this bug. ***
Comment 41 Florian Best univentionstaff 2017-09-27 11:24:43 CEST 
*** Bug 45438 has been marked as a duplicate of this bug. ***
Comment 42 Florian Best univentionstaff 2017-09-27 11:38:22 CEST 
If the regular ldap bind fails a SASL bind with SAML is performed. If this succeeds the internal auth_type state is set to "SAML". An error is logged then because this would be the proove that we have a bug in the auth-type-state detection.
More useful information are now written on PROCESS level into the logfile.

univention-management-console (9.0.80-73):
dc1a71cde5ba | Bug #44382: Bug #45438: Merge branch 'fbest/44382-invalid-credentials' into 4.2-2
a35a2bd1b0d2 | Bug #44382: try to authenticate via SAML if simple bind failed. Add more logging.
0f023244c2de | Merge branch 'fbest/44382-invalid-credentials' into 4.2-2
a53597a4173c | Bug #44382: be more verbose about LDAP authentication failures

univention-management-console.yaml:
8d1c30177a69 | YAML Bug #44382
Comment 43 Stefan Gohmann univentionstaff 2017-10-02 16:48:01 CEST 
Tests: I was unable to reproduce the issue. But the login still works.

Code review: OK

YAML: OK
Comment 44 Arvid Requate univentionstaff 2017-10-10 15:38:44 CEST 
<http://errata.software-univention.de/ucs/4.2/196.html>
Comment 45 Florian Best univentionstaff 2017-10-13 13:21:30 CEST 
This happened in Daniels VM with the school-import module, which fortunately logs the password length. Here is the log output:

/var/log/univention/management-console-server.log
13.10.17 13:02:25.262  MODULE      ( PROCESS ) : Setting auth type to None
13.10.17 13:02:25.456  MAIN        ( PROCESS ) : Updating user password in 0 running module processes (auth-type: None).
13.10.17 13:02:25.471  MAIN        ( PROCESS ) : running: ['/usr/sbin/univention-management-console-module', '-m', 'schoolimport', '-s', '/var/run/univention-management-console/1292-1507892545471.socket', '-d', '2', '-l', 'de_DE.UTF-8']
13.10.17 13:02:37.436  MAIN        ( WARN    ) : Socket died (module=schoolimport)
13.10.17 13:02:37.437  MAIN        ( WARN    ) : Module process schoolimport died (pid: 2827, exit status: -1, signal: -1, status: -1)
13.10.17 13:02:37.437  MAIN        ( WARN    ) : Cleaning up requests
13.10.17 13:02:37.437  MAIN        ( WARN    ) : Remove inactivity timer
13.10.17 13:02:37.437  MAIN        ( PROCESS ) : ModuleProcess: child died
13.10.17 13:02:57.149  MAIN        ( PROCESS ) : Connection timed out.
13.10.17 13:02:57.150  MAIN        ( PROCESS ) : Processor: dying


/var/log/univention/management-console-web-server.log
13.10.17 13:00:44.786  MAIN        ( PROCESS ) : SessionClient(0x7f76d1a38cd0): _authenticated: success=True  status=200  message=None
13.10.17 13:00:44.786  MAIN        ( PROCESS ) : auth_type='SAML'
13.10.17 13:02:25.458  MAIN        ( PROCESS ) : SessionClient(0x7f76d1a458d0): _authenticated: success=True  status=200  message=None
13.10.17 13:02:27.279  MAIN        ( PROCESS ) : CPCommand (10.205.1.18:37100) response status code: 591
13.10.17 13:02:27.280  MAIN        ( PROCESS ) : CPCommand (10.205.1.18:37100) response message: Die Ausführung des Kommandos schoolimport/ping ist fehlgeschlagen:

Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 182, in _recv
    self.handle(msg)
  File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 292, in handle
    self.__handler.init()
  File "/usr/lib/pymodules/python2.7/univention/management/console/modules/schoolimport/__init__.py", line 68, in init
    self.client = Client(self.username, self.password, log_level=Client.LOG_RESPONSE)
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 316, in __init__
    setattr(self, cls_name, kls(self))
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 399, in __init__
    self.resource_url = self.client.resource_urls[self.resource_name]
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 326, in resource_urls
    self._resource_urls = self.call_api('get', '.')
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 390, in call_api
    raise exc(msg, status_code=response.status_code)
BadRequest: Received status_code=400 with reason='Bad Request' for requests.get(**files=None, url=u'https://m150.uni.dtr/api/v1/', auth=('teacher1', u'****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************'), headers={u'Accept': u'application/json'}, params=None, data=None).

13.10.17 13:02:27.280  MAIN        ( PROCESS ) : CPCommand (10.205.1.18:37100) response result: None
13.10.17 13:06:05.763  MAIN        ( PROCESS ) : SessionClient(0x7f76d1962b10): _authenticated: success=True  status=200  message=None
13.10.17 13:06:05.764  MAIN        ( PROCESS ) : auth_type='SAML'
13.10.17 13:10:03.531  DEBUG_INIT


/var/log/univention/management-console-module-schoolimport.log

13.10.17 13:02:25.732  DEBUG_INIT
13.10.17 13:02:26.981  MODULE      ( PROCESS ) : Loading python module.
13.10.17 13:02:27.186  MODULE      ( PROCESS ) : Imported python module.
13.10.17 13:02:27.186  MODULE      ( PROCESS ) : Module instance created.
13.10.17 13:02:27.186  MODULE      ( PROCESS ) : Module socket initialized.
13.10.17 13:02:27.233  MODULE      ( PROCESS ) : Setting user LDAP DN 'uid=teacher1,cn=lehrer,cn=users,ou=SchuleDrei,dc=uni,dc=dtr'
13.10.17 13:02:27.233  MODULE      ( PROCESS ) : Setting auth type to None
13.10.17 13:02:27.233  MODULE      ( PROCESS ) : Initializing module.
13.10.17 13:02:27.276  MODULE      ( PROCESS ) : Die Ausführung des Kommandos  ist fehlgeschlagen:
13.10.17 13:02:27.277  MODULE      ( PROCESS ) : Die Ausführung des Kommandos schoolimport/ping ist fehlgeschlagen:

Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 182, in _recv
    self.handle(msg)
  File "/usr/lib/pymodules/python2.7/univention/management/console/protocol/modserver.py", line 292, in handle
    self.__handler.init()
  File "/usr/lib/pymodules/python2.7/univention/management/console/modules/schoolimport/__init__.py", line 68, in init
    self.client = Client(self.username, self.password, log_level=Client.LOG_RESPONSE)
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 316, in __init__
    setattr(self, cls_name, kls(self))
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 399, in __init__
    self.resource_url = self.client.resource_urls[self.resource_name]
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 326, in resource_urls
    self._resource_urls = self.call_api('get', '.')
  File "/usr/lib/pymodules/python2.7/ucsschool/http_api/client.py", line 390, in call_api
    raise exc(msg, status_code=response.status_code)
BadRequest: Received status_code=400 with reason='Bad Request' for requests.get(**files=None, url=u'https://m150.uni.dtr/api/v1/', auth=('teacher1', u'****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************'), headers={u'Accept': u'application/json'}, params=None, data=None).

13.10.17 13:02:37.277  MAIN        ( WARN    ) : Shutting down all open connections
Comment 46 Johannes Keiser univentionstaff 2018-10-04 13:44:23 CEST 
Reported again: Version: 4.2-1 errata52 (Lesum)
Ticket#2018081721000695

The initialization of the module failed:

Traceback (most recent call last):
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 178, in _recv
    self.handle(msg)
  File "%PY2.7%/univention/management/console/protocol/modserver.py", line 291, in handle
    self.__handler.init()
  File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 155, in init
    self.settings = UDM_Settings()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 898, in __init__
    self.read()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 901, in read
    self._read_directories()
  File "%PY2.7%/univention/management/console/modules/udm/udm_ldap.py", line 88, in _decorated
    return method(*args, **kwargs)
  File "%PY2.7%/univention/management/console/ldap.py", line 140, in _decorated
    kwargs[loarg], kwargs[poarg] = lo, po = getter()
  File "%PY2.7%/univention/management/console/ldap.py", line 130, in getter
    conn = connection()
  File "%PY2.7%/univention/management/console/ldap.py", line 53, in connection
    bind(lo)
  File "%PY2.7%/univention/management/console/modules/udm/__init__.py", line 169, in bind_user_connection
    super(Instance, self).bind_user_connection(lo)
  File "%PY2.7%/univention/management/console/base.py", line 353, in bind_user_connection
    lo.lo.bind(self._user_dn, self._password)
  File "%PY2.7%/univention/uldap.py", line 165, in bind
    self.lo.simple_bind_s(self.binddn, self.__encode_pwd(self.bindpw))
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 879, in simple_bind_s
    res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 860, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 215, in simple_bind_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}