Description Julia Bremer 2020-11-30 09:31:11 CET

Created attachment 10570 [details]
create complex password

If a user is added in AD, the Ad connector sets a "random" generated password at creation of the new UCS user, before actually synchronizing the password.
This password is a long sequence of numbers.
This is not sufficient if a customer has configured the default pwdpolicy to check for pwdQuality and set "password/quality/mspolicy" to true.
The following reject is created:

24.11.2020 13:33:58.703 LDAP        (ERROR  ): Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/univention/connector/__init__.py", line 1329, in sync_to_ucs
    result = self.add_in_ucs(property_type, object, module, position)
  File "/usr/lib/python2.7/dist-packages/univention/connector/__init__.py", line 1149, in add_in_ucs
    return bool(ucs_object.create())
  File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 557, in create
    dn = self._create(response=response, serverctrls=serverctrls)
  File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 1241, in _create
    al.extend(self._ldap_modlist())
  File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/users/user.py", line 1693, in _ldap_modlist
    self._check_password_complexity(pwhistoryPolicy)
  File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/users/user.py", line 1789, in _check_password_complexity
    raise univention.admin.uexceptions.pwQuality(str(e).replace('W?rterbucheintrag', 'Wörterbucheintrag').replace('enth?lt', 'enthält'))
pwQuality: Password does not meet the password complexity requirements.


The s4connector already creates a sufficient password.
We should add the same behavior to the AD connector.