Univention Bugzilla – Bug 54518
ldap.INVALID_CREDENTIALS in quota.py listener during join
Last modified: 2022-03-14 11:10:06 CET
2 times in /var/log/univention/join.log: https://jenkins.knut.univention.de:8181/job/UCS-5.0/job/UCS-5.0-1/job/AutotestUpgrade/SambaVersion=s4,Systemrolle=backup/ws/test/join.log Traceback (most recent call last): File "/usr/lib/univention-directory-listener/system/quota.py", line 216, in handler if _is_container_change_relevant(new, old): File "/usr/lib/univention-directory-listener/system/quota.py", line 142, in _is_container_change_relevant lo = _get_ldap_connection() File "/usr/lib/univention-directory-listener/system/quota.py", line 119, in _get_ldap_connection connection = univention.uldap.getMachineConnection(ldap_master=False) File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 191, in getMachineConnection return access(host=server, port=port, base=ucr['ldap/base'], binddn=ucr['ldap/hostdn'], bindpw=bindpw, start_tls=start_tls, decode_ignorelist=decode_ignorelist, reconnect=reconnect) File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 283, in __init__ self.__open(ca_certfile) File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 370, in __open self.bind(self.binddn, self.bindpw) File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 207, in _decorated return func(self, *args, **kwargs) File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 303, in bind self.lo.simple_bind_s(self.binddn, self.__encode_pwd(self.bindpw)) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 949, in simple_bind_s res = self._apply_method_s(SimpleLDAPObject.simple_bind_s,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 931, in _apply_method_s return func(self,*args,**kwargs) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 223, in simple_bind_s resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 514, in result3 resp_ctrl_classes=resp_ctrl_classes File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 521, in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call result = func(*args,**kwargs) ldap.INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}
567b6ac0e0 Bug #54518: [grep_traceback]: ignore traceback
Probably Bug #54504 comment 2 - it only happens for the upgrade test from 4.4-8 to 5.0-x - due to the broken priority for `replication.py` the local LDAP server does not get replicated. - `quota.py` tries to connect to the local LDAP server using the machine credentials - as the local LDAP server is still unprovisioned the connection fails. The latest run non longer has `ldap.INVALID_CREDENTIALS`. *** This bug has been marked as a duplicate of bug 54504 ***
OK: duplicate 1e78e4f394 Revert "Bug #54518: [grep_traceback]: ignore traceback"