In this bug we'll only fix the password complexity of the password generated in the join script. The error in UDM will be addressed in the original Bug 52446. ======================================================================= +++ This bug was initially created as a clone of Bug #52446 +++ Configure 35ucs-school-import.inst Mon Nov 30 14:37:38 CET 2020 2020-11-30 14:37:38.379475972+01:00 (in joinscript_init) Creating password for unprivileged LDAP user importhttpapi-dc-backup. Creating unprivileged LDAP user importhttpapi-dc-backup... Traceback (most recent call last): File "/usr/share/univention-directory-manager-tools/univention-cli-server", line 219, in doit output = univention.admincli.admin.doit(arglist) File "/usr/lib/python2.7/dist-packages/univention/admincli/admin.py", line 409, in doit out = _doit(arglist) File "/usr/lib/python2.7/dist-packages/univention/admincli/admin.py", line 755, in _doit dn = object.create() File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 557, in create dn = self._create(response=response, serverctrls=serverctrls) File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 1241, in _create al.extend(self._ldap_modlist()) File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/users/ldap.py", line 223, in _ldap_modlist self._check_password_complexity(pwhistoryPolicy) File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/users/ldap.py", line 302, in _check_password_complexity pwdCheck.check(self['password'], username=self['username'], displayname=self['displayName']) File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 478, in __getitem__ elif key not in self.__no_default and self.descriptions[key].editable: KeyError: 'displayName' First displayName is much confusing, because a simple authentication accound doe not have a 'display name'. So maybe looking for 'description'? So removing the quality check in the default password policy fixed the problem temporarily and the joinscript got finished.
The password now includes special, lower and upper case chars and is 50 chars long. This should satisfy any realistic password policy. The actual policy is not analysed. [4.4] 6ae55f64c Bug #52770: generate password for importhttpapi user/ldap including special chars [4.4] f0d3ee642 Bug #52770: advisory update ucs-school-import (17.0.49)
Changelog&Advisory: OK Fix: OK Tested on VM: OK Jenkins: OK
Errata update for UCS@school 4.4 v8 have been released. https://docs.software-univention.de/changelog-ucsschool-4.4v8-de.html If this error occurs again, please clone this bug.