Bug 56394 - ldap.INVALID_CREDENTIALS: KeyError in %PY3%/univention/management/console/ldap.py
ldap.INVALID_CREDENTIALS: KeyError in %PY3%/univention/management/console/lda...
Status: NEW
Product: UCS
Classification: Unclassified
Component: UMC (Generic)
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-08-02 14:26 CEST by Mika Westphal
Modified: 2023-08-02 14:26 CEST (History)
0 users

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023071021000298
Bug group (optional): Error handling, External feedback
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mika Westphal univentionstaff 2023-08-02 14:26:21 CEST
Traceback (most recent call last):
  File "%PY3%/univention/management/console/ldap.py", line 188, in getter
    raise KeyError()
KeyError

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "%PY3%/univention/uldap.py", line 212, in _decorated
    return func(self, *args, **kwargs)
  File "%PY3%/univention/uldap.py", line 382, in __starttls
    self.lo.start_tls_s()
  File "%PY3%/ldap/ldapobject.py", line 1220, in start_tls_s
    res = self._apply_method_s(SimpleLDAPObject.start_tls_s,*args,**kwargs)
  File "%PY3%/ldap/ldapobject.py", line 1197, in _apply_method_s
    return func(self,*args,**kwargs)
  File "%PY3%/ldap/ldapobject.py", line 864, in start_tls_s
    return self._ldap_call(self._l.start_tls_s)
  File "%PY3%/ldap/ldapobject.py", line 329, in _ldap_call
    reraise(exc_type, exc_value, exc_traceback)
  File "%PY3%/ldap/compat.py", line 44, in reraise
    raise exc_value
  File "%PY3%/ldap/ldapobject.py", line 313, in _ldap_call
    result = func(*args,**kwargs)
ldap.CONNECT_ERROR: {'desc': 'Connect error', 'info': 'error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (self signed certificate in certificate chain)'}

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "%PY3%/tornado/web.py", line 1595, in _execute
    result = yield result
  File "%PY3%/tornado/gen.py", line 1133, in run
    value = future.result()
  File "%PY3%/tornado/gen.py", line 1141, in run
    yielded = self.gen.throw(*exc_info)
  File "%PY3%/univention/management/console/resources.py", line 457, in post
    """Authenticate the user via PAM - either via plain password or via SAML message"""
  File "%PY3%/tornado/gen.py", line 1133, in run
    value = future.result()
  File "%PY3%/tornado/gen.py", line 1147, in run
    yielded = self.gen.send(value)
  File "%PY3%/univention/management/console/session.py", line 148, in authenticate
    if authenticated:
  File "%PY3%/univention/management/console/session.py", line 172, in set_credentials
    self.user.password = password
  File "%PY3%/univention/management/console/session.py", line 183, in _search_user_dn
    def _search_user_dn(self):
  File "%PY3%/univention/management/console/ldap.py", line 144, in get_machine_connection
    return connection()
  File "%PY3%/univention/management/console/ldap.py", line 200, in _decorated
    kwargs[loarg], kwargs[poarg] = lo, po = getter()
  File "%PY3%/univention/management/console/ldap.py", line 190, in getter
    conn = connection()
  File "%PY3%/univention/management/console/ldap.py", line 101, in connection
    return _getMachineConnection(**kwargs)
  File "%PY3%/univention/admin/uldap.py", line 178, in getMachineConnection
    lo = univention.uldap.getMachineConnection(start_tls, decode_ignorelist=decode_ignorelist, ldap_master=ldap_master)
  File "%PY3%/univention/uldap.py", line 196, in getMachineConnection
    return access(host=server, port=port, base=ucr['ldap/base'], binddn=ucr['ldap/hostdn'], bindpw=bindpw, start_tls=start_tls, decode_ignorelist=decode_ignorelist, reconnect=reconnect)
  File "%PY3%/univention/uldap.py", line 292, in __init__
    self.__open(ca_certfile)
  File "%PY3%/univention/uldap.py", line 368, in __open
    self.__starttls()
  File "%PY3%/univention/uldap.py", line 220, in _decorated
    return func(self, *args, **kwargs)
  File "%PY3%/univention/uldap.py", line 382, in __starttls
    self.lo.start_tls_s()
  File "%PY3%/ldap/ldapobject.py", line 1220, in start_tls_s
    res = self._apply_method_s(SimpleLDAPObject.start_tls_s,*args,**kwargs)
  File "%PY3%/ldap/ldapobject.py", line 1197, in _apply_method_s
    return func(self,*args,**kwargs)
  File "%PY3%/ldap/ldapobject.py", line 864, in start_tls_s
    return self._ldap_call(self._l.start_tls_s)
  File "%PY3%/ldap/ldapobject.py", line 329, in _ldap_call
    reraise(exc_type, exc_value, exc_traceback)
  File "%PY3%/ldap/compat.py", line 44, in reraise
    raise exc_value
  File "%PY3%/ldap/ldapobject.py", line 313, in _ldap_call
    result = func(*args,**kwargs)
ldap.CONNECT_ERROR: {'desc': 'Connect error', 'info': 'error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (self signed certificate in certificate chain)'}
Comment 1 Mika Westphal univentionstaff 2023-08-02 14:26:58 CEST
(In reply to Mika Westphal from comment #0)
5.0-4 errata726