Bug 51803 - (ES 4.3): Memory Leak in univention-management-console-server
Summary: (ES 4.3): Memory Leak in univention-management-console-server
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
Version: UCS 4.3
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 4.3 extended security
Assignee: Felix Botner
QA Contact: Julia Bremer
URL:
Keywords:
Depends on: 50583
Blocks:
  Show dependency treegraph
 
Reported: 2020-08-11 12:45 CEST by Florian Best
Modified: 2021-06-14 09:58 CEST (History)
12 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.286
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support: Yes
Flags outvoted (downgraded) after PO Review: Yes
Ticket number: 2019112221000373
Bug group (optional):
Customer ID: 00026
Max CVSS v3 score:
best: Patch_Available+


Attachments
repr1.sh (560 bytes, application/x-shellscript)
2020-09-08 17:02 CEST, Felix Botner
Details
repr2.py (1.75 KB, text/x-python)
2020-09-08 17:03 CEST, Felix Botner
Details
univention-management-console.yaml (273 bytes, application/x-yaml)
2020-09-11 12:08 CEST, Felix Botner
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2020-08-11 12:45:19 CEST
The fix should be backported to UCS 4.3:

+++ This bug was initially created as a clone of Bug #50583 +++

We have several reports about a memory leak in the univention-management-console-server.
Comment 1 Nico Gulden univentionstaff 2020-08-11 13:43:21 CEST
Why? UCS 4.3 is out of maintenance.
Comment 2 Florian Best univentionstaff 2020-08-11 13:55:08 CEST
(In reply to Nico Gulden from comment #1)
> Why? UCS 4.3 is out of maintenance.

Important and Security fixes for important customers get backported.
Comment 4 Felix Botner univentionstaff 2020-09-08 16:59:43 CEST
Successful build
Package: univention-management-console
Version: 10.0.6-26A~4.3.0.202009081633
Branch: ucs_4.3-0
Scope: errata4.3-5

Successful build
Package: univention-management-console
Version: 10.0.6-26A~4.3.0.202009081640
Branch: ucs_4.3-0
Scope: extsec4.3

Hopefully all necessary commits are new cherry-picked into 4.3-5:ucs/management/univention-management-console

More info about what was merged in 82a09c48f0129b0ac0d804898fe5179c940f936f.

test:
 * unfortunately our "sync errata to testing" job does not work with
   "unmaintained" releases, so i could start jenkins tests 
 * The two reproducer scripts repr1.sh and repr2.py 
   (slightly modified for 4.3) passed.
 * Also a manual ucs-test run with the sections umc and selenium succeeded

-> ucs-test  -E dangerous -s selenium -s umc
UCS 4.3-5-e682 ucs-test 8.0.30-8A~4.3.0.202006022137
========================= Section 'umc' =====================================================================
Test UMC ACLs................................................................... Test passed
Test UMC policy result.......................................................... Test skipped (role mismatch)
Check if UMC is able to return correct IP address............................... Test passed
Test UMC object policies with non-UCR-policies.................................. Test passed
Change of expired password at UMC logon (with password complexity).............. Test passed
Logrotation should trigger UMC components to reopen their logfiles.............. Test passed
Check if the webserver is responding after sending many unanswered requests..... Test skipped (role mismatch)
Test apache redirection rules................................................... Test passed
Test security related HTTP headers are set...................................... Test passed
Test error messages if UMC server is down....................................... Test passed
Test UMC authentication with expired accounts................................... Test passed
Test detection of changing expired password failure reason...................... Test passed
Check if requests are answered with an error code after killing ucstest module.. Test passed
Test python-notifer does not crash anymore...................................... Test passed
Test the output of the UMC service module....................................... Test passed
Re-set pwdChangeNextLogin=1 during udm cli password change...................... Test skipped (role mismatch)
Check if requests with tracebacks are handled correctly......................... Test passed
Test the UMC service module autostart behaviour................................. Test passed
Test the UMC service module process handling.................................... Test passed
Test the UMC backend process killing............................................ Test passed
Test the UMC user creation, modification and deletion........................... Test passed
Test the UMC group creation, modification and deletion.......................... Test passed
Test the UMC modules access for restricted users................................ Test passed
Test the UMC user authentication and password change............................ Test passed
Test querying UDM with a non-posix UMC user..................................... Test passed
Test unsetting userexpiry attribute via UMC..................................... Test passed
Test setting of user photo via UMC.............................................. Test passed
Test the UMC domain join module................................................. Test skipped (wrong version)
Test the UMC domain complete rejoin............................................. Test skipped (role mismatch)
Test the UMC file quota module.................................................. Test passed
Test the UMC print quota module................................................. Test skipped (missing software)
Test the UMC extended attributes................................................ Test passed
Test the UMC network functionality.............................................. Test passed
Check basic ip_change functionality............................................. Test passed
Check if ip_change also changes the ucs-sso entry............................... Test passed
Test the UMC license management................................................. Test skipped (missing software)
Test the default values of properties........................................... Test passed

========================== Section 'selenium' ==================================================================
Change password via User Settings............................................... Test passed
(Re)join a domain controller.................................................... Test skipped (role mismatch)
Execute a custom join script.................................................... Test skipped (role mismatch)
check setting UCR variables..................................................... Test passed
test language switch, logout, module visibility, process timeout................ Test passed
Test if all expected modules are available for 'root' and 'administrator'....... Test passed
Test if all available modules can be opened and closed without a problem........ Test passed
Test the 'System diagnostic' module............................................. Test passed
Test the 'System diagnostic' module............................................. Test passed
Test the 'System diagnostic' module............................................. Test passed
Test the 'System diagnostic' module............................................. Test passed
Test the 'System diagnostic' module.............................................
 Test passed
test password reset via self service app........................................ Test skipped (missing software)
test adding, modifying, removal of UDM objects.................................. Test passed
Various test for UDM users/user................................................. Test passed
Test adding, changing and removing a photo for a user........................... Test passed
Test favorite modules........................................................... Test passed
Test the 'Process overview' module.............................................. Test passed
Test the 'System services' module............................................... Test skipped (role mismatch)
Test the 'System diagnostic' module............................................. Test skipped (role mismatch)
Test the 'System diagnostic' module............................................. Test passed
Test changing Appearance Font color from within the portal...................... Test passed
Test changing Appearance CSS background from within the portal.................. Test passed
Test changing the order of portal categories/entries from within the portal..... Test passed
Test adding portal categories and entries from within the portal................ Test passed
Test creating a portal via UMC.................................................. Test passed
Comment 5 Felix Botner univentionstaff 2020-09-08 17:02:49 CEST
Created attachment 10473 [details]
repr1.sh
Comment 6 Felix Botner univentionstaff 2020-09-08 17:03:09 CEST
Created attachment 10474 [details]
repr2.py
Comment 7 Felix Botner univentionstaff 2020-09-11 12:08:13 CEST
Created attachment 10488 [details]
univention-management-console.yaml

YAML file for errata release
Comment 8 Julia Bremer univentionstaff 2020-09-18 08:59:27 CEST
Code review of cherry-picks and adjustments for merge conflicts:OK
All commits have been cherry-picked: (kind of hard to tell but I found no missing commits) OK
Package built in extended security scope: OK
Package installable: OK
ucs-test on master with these additional packages installed successfull: OK
reproducers successful: OK
YAML: Ok
Verified