Bug 54402 - RuntimeError: …,cn=templates,cn=univention not detected: ['univentionUserTemplate', ']
RuntimeError: …,cn=templates,cn=univention not detected: ['univentionUserTemp...
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: UDM (Generic)
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-1-errata
Assigned To: Christian Castens
Florian Best
https://git.knut.univention.de/univen...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-02-01 11:53 CET by Riya Bhattacharjee
Modified: 2022-03-23 14:14 CET (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.034
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2022011821000429, 2022020121000861,2022030321000266
Bug group (optional): bitesize, Regression
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Florian Best univentionstaff 2022-02-01 11:58:43 CET
This was introduced by myself in git:fa6de80fffde13cc5798c2d93c71ef20c125f394 in UCS 5.0-0.

This is a user template. Not sure if we should treat it like users/user as has been done before.
Maybe skip it?
Comment 2 Maximilian Janßen univentionstaff 2022-02-02 19:11:22 CET
Version: 5.0-1 errata187

Remark: This only started happening after the update to UCS 5.0.1 from a fully patched UCS 4.4.8

Error: 
Internal server error during "udm/get (groups/group)".
Request: udm/get (groups/group)

Traceback (most recent call last):
  File "%PY3%/notifier/threads.py", line 80, in _run
    result = self._function()
  File "%PY3%/notifier/__init__.py", line 105, in __call__
    return self._function(*tmp, **self._kwargs)
  File "%PY3%/univention/management/console/modules/udm/__init__.py", line 521, in _get
    obj = module.get(ldap_dn)
  File "%PY3%/univention/management/console/modules/udm/udm_ldap.py", line 720, in get
    obj.open()
  File "%PY3%/univention/admin/handlers/groups/group.py", line 354, in open
    raise RuntimeError('%s not detected: %r' % (i, result))
RuntimeError: cn=****,cn=templates,cn=univention,dc=****,dc=**** not detected: [b'top', b'univentionSAMLEnabled', b'univentionObject',
b'univentionUserTemplate', b'univentionGoogleApps', b'univentionNetworkAccess']

Role: domaincontroller_master
Comment 4 Christian Castens univentionstaff 2022-03-03 18:15:45 CET
Opening a group containing an object with objectClass`univentionUserTemplate` in its `uniqueMembers` raised a RuntimeError since git:fa6de80fffde13cc5798c2d93c71ef20c125f394. As a group can only contain hosts, groups or users the value is now simply ignored. This is a regression in UCS 5.0 which resulted from the Python 3 migration of UDM. The previous behavior (to put user templates into the `user` attribute) has not been restored as it does not make sense: user templates store their group membership in an explicit attribute and not via direct group memberships.


Successful build
Package: univention-directory-manager-modules
Version: 15.0.11-31A~5.0.0.202203031749
Branch: ucs_5.0-0
Scope: errata5.0-1

5.0-1
commits:
3a0e2a7e43adae72c4e94718e2fd32d7746c5a61 (fix)
628d6b92ffcda2dec34b43e7cf772f462683f9f1 (yaml)

5.0-1 mr:
https://git.knut.univention.de/univention/ucs/-/merge_requests/287
Comment 5 Dirk Schnick univentionstaff 2022-03-04 07:50:48 CET
Seems to be the same customer. Florian and Christian pointed on the membership of the template in some groups. After deleting this membership the template worked.

It is unknown how this template became a member of these groups. 

Added ticket number and filled "What kind of...", "What type of...", "Who will be affected..." and "How will those affected feel..."
Comment 6 Florian Best univentionstaff 2022-03-04 11:34:31 CET
OK: user templates which are part of a group are ignored in open (so they aren't mapped to any property)
We didn't find out how the customer system could get into the situation. I went back to the initial SVN import to find code for that.
OK: YAML