Bug 46476 - UMC web server spams logfile if memberof overlay is not active
UMC web server spams logfile if memberof overlay is not active
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.3-0-errata
Assigned To: Jannik Ahlers
Dirk Wiesenthal
:
Depends on: 46702
Blocks:
  Show dependency treegraph
 
Reported: 2018-03-03 22:12 CET by Sönke Schwardt-Krummrich
Modified: 2019-03-01 21:06 CET (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2018-03-03 22:12:07 CET
UCS master+slave has been updated from 4.2-3 to 4.3-0. Afterwards the logfile management-console-web-server.log is spammed with the following logfiles each 30 seconds for each UMC session.

==> management-console-web-server.log <==
26.02.18 05:21:27.610  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:21:57.613  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:22:27.608  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:22:57.613  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:23:27.652  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:23:57.616  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:24:28.598  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:24:58.196  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:25:28.398  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:25:58.352  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
26.02.18 05:26:29.316  MAIN        ( ERROR   ) : Could not get groups for u'Administrator': Maybe memberof overlay module is inactive
Comment 1 Jannik Ahlers univentionstaff 2018-03-16 13:26:22 CET
The log is generated by the session-info query which tries to get the user's group using the memberof attribute. This is of course not possible if the memberof overlay is deactivated.

But there is another side effect of this if the memberof overlay is deactivated: 
The new function to change portal object's visibility depending on a user's group membership uses the group membership information provided in the session-info query. This behaviour is broken due to session-info returning 'null' when the  memberof-overlay is deactivated.
Comment 2 Jannik Ahlers univentionstaff 2018-05-07 17:09:17 CEST
I simply set the loglevel to info to reduce spamming.

Successful build
Package: univention-management-console
Version: 10.0.6-2A~4.3.0.201805071652
Branch: ucs_4.3-0
Scope: errata4.3-0

univention-management-console.yaml
ab1207a709d1 | Bug #46476: YAML

univention-management-console (10.0.6-2)
6b36eb9ccdd0 | Bug #46476: reduce loglevel of failed group info request
Comment 3 Dirk Wiesenthal univentionstaff 2018-05-16 10:49:02 CEST
Okay, better.

(In reply to Jannik Ahlers from comment #1)
> But there is another side effect of this if the memberof overlay is
> deactivated: 
> The new function to change portal object's visibility depending on a user's
> group membership uses the group membership information provided in the
> session-info query. This behaviour is broken due to session-info returning
> 'null' when the  memberof-overlay is deactivated.

Yes, this is documented in the manual.
Comment 4 Arvid Requate univentionstaff 2018-05-16 17:03:57 CEST
<http://errata.software-univention.de/ucs/4.3/38.html>