Bug 54085 - unable to move "simple authentication account" to another container
unable to move "simple authentication account" to another container
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UMC - LDAP directory
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Florian Best
Dirk Wiesenthal
https://git.knut.univention.de/univen...
: python3-migration
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2021-11-18 12:41 CET by Dirk Ahrnke
Modified: 2022-03-23 14:14 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2021113021000344
Bug group (optional): bitesize, Regression
Max CVSS v3 score:
best: Patch_Available+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Ahrnke univentionstaff 2021-11-18 12:41:41 CET
UCS: 5.0-0 errata157
noticed during UCS-training 2021-11

steps to reproduce:
- create a simple authentication account (see https://help.univention.com/t/cool-solution-ldap-search-user-simple-authentication-account/11818)
- try to move the account to another container using the LDAP module

result: the attempt fails, a traceback is shown

expected result: assuming the product allows the movement of those objects the attempt should succeed.

workaround: delete the original account and recreate it at the desired location. As the applications that are using this account have to be adjusted anyway to use the new DN there is most likely more effort at their side than on the steps to recreate the account in UCS
Comment 1 Dirk Ahrnke univentionstaff 2021-11-18 12:43:43 CET
Interner Server-Fehler in "udm/progress (navigation)".
Request: udm/progress (navigation)

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/management/console/base.py", line 344, in __error_handling
    six.reraise(etype, exc, etraceback)
  File "/usr/lib/python3/dist-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3/dist-packages/univention/management/console/base.py", line 247, in execute
    function.__func__(self, request, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/decorators.py", line 321, in _response
    result = _multi_response(self, request)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/decorators.py", line 181, in _response
    return function(self, request)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/decorators.py", line 443, in _response
    return list(function(self, iterator, *nones))
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/decorators.py", line 289, in _fake_func
    yield function(self, *args)
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/mixins.py", line 158, in progress
    ret = progress_obj.poll()
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/mixins.py", line 102, in poll
    six.reraise(*self.exc_info)
  File "/usr/lib/python3/dist-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/decorators.py", line 431, in _thread
    for res in function(self, iterator, *nones):
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/udm/__init__.py", line 375, in move
    module.move(object, options['container'])
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/udm/udm_ldap.py", line 588, in move
    obj.move(dest)
  File "/usr/lib/python3/dist-packages/univention/admin/handlers/__init__.py", line 805, in move
    res = n(self._move(newdn, ignore_license=ignore_license))
  File "/usr/lib/python3/dist-packages/univention/admin/handlers/users/ldap.py", line 315, in _move
    subelements = self.lo.search(base=self.dn, scope='one', attr=[b'objectClass'])  # FIXME: identify may fail, but users will raise decode-exception
  File "/usr/lib/python3/dist-packages/univention/admin/uldap.py", line 669, in search
    return self.lo.search(filter, base, scope, attr, unique, required, timeout, sizelimit, serverctrls=serverctrls, response=response)
  File "/usr/lib/python3/dist-packages/univention/uldap.py", line 208, in _decorated
    return func(self, *args, **kwargs)
  File "/usr/lib/python3/dist-packages/univention/uldap.py", line 516, in search
    res = self.lo.search_ext_s(base, ldap_scope, filter, attr, serverctrls=serverctrls, clientctrls=None, timeout=timeout, sizelimit=sizelimit)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1259, in search_ext_s
    return self._apply_method_s(SimpleLDAPObject.search_ext_s,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1197, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 845, in search_ext_s
    msgid = self.search_ext(base,scope,filterstr,attrlist,attrsonly,serverctrls,clientctrls,timeout,sizelimit)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 841, in search_ext
    timeout,sizelimit,
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 313, in _ldap_call
    result = func(*args,**kwargs)
TypeError: ('attrs_from_List(): expected string in list', b'objectClass')
Comment 2 Florian Best univentionstaff 2022-02-21 18:46:17 CET
Patch in https://git.knut.univention.de/univention/ucs/-/merge_requests/284.
Comment 3 Florian Best univentionstaff 2022-03-04 17:55:33 CET
Fixed in:

univention-directory-manager-modules.yaml
5c324d315478 | Bug #54085: fix moving of users/ldap objects

univention-directory-manager-modules (15.0.11-32)
9a0a00b1d7a6 | fixup! Bug #54085: fix moving of users/ldap objects
5c324d315478 | Bug #54085: fix moving of users/ldap objects
Comment 4 Dirk Wiesenthal univentionstaff 2022-03-23 12:36:34 CET
YAML: OK
Code review: OK
Manual tests: OK

VERIFIED