Bug 56418 – Accessing self-service/profile path as logged in user shows an error

Bug 56418 - Accessing self-service/profile path as logged in user shows an error


Summary:	Accessing self-service/profile path as logged in user shows an error

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Self Service
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2023-08-11 09:16 CEST by Christina Scheinig
Modified:	2023-08-28 09:36 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.069
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2023072421000164
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christina Scheinig

2023-08-11 09:16:39 CEST

If you are already logged in via saml and go to the https://10.200.43.170/univention/portal/#/selfservice/profile path to change your profile, you will get an error

An error occurred

2 error(s) occurred
After that you get the profile login window.

management-console-web-server.log shows
24.07.23 10:36:12.531  MAIN        ( PROCESS ) : CPCommand (192.168.24.4:37078) response message: 2 error(s) occurred
24.07.23 10:36:12.531  MAIN        ( PROCESS ) : CPCommand (192.168.24.4:37078) response result: {'username': 'Argument required', 'password': 'Argument required'}
24.07.23 10:36:12.531  MAIN        ( PROCESS ) : CPCommand (192.168.24.4:37078) response error: {'command': 'get_user_attributes_values', 'traceback': None}

In the sourcecode from passwortreset you find this ucr Variable
DISALLOW_AUTHENTICATION = not ucr.is_true('umc/self-service/allow-authenticated-use')
which is set to true per default since UCS4.4-7

The customer has set this variable to true, than it worked again.