Description Daniel Tröder 2023-11-20 11:16:06 CET

In OX App Suite join script 93univention-ox.inst the function configure_ox_connector() tries to read the credentials for the default context from /etc/ox-secrets/context10.secret and uses "oxadmin" as the username, even when the default context is not 10.

This leads to an unusable OX Connector.

-------------------------------------------------------------------

root@ox:~# ls -l /etc/ox-secrets/
insgesamt 16
-rw------- 1 root root 21 Nov 17 16:17 context50.secret
-rw------- 1 root root 21 Nov 17 16:13 dbuser.secret
-rw------- 1 root root 21 Nov 17 16:13 master.secret
-rw------- 1 root root 17 Nov 17 16:10 rest-api-basic-auth.secret

root@ox:~# ucr get ox/context/id 
50

root@ox:~# cat /etc/ox-secrets/context50.secret 
LVjW7BAR2XJ8qH4_.8kJ

root@ox:~# udm users/user list --filter 'uid=oxadmin*' | grep username
  username: oxadmin-context50

root@ox:~# cat /var/lib/univention-appcenter/apps/ox-connector/data/secrets/contexts.json 
{
  "50": {
    "adminpass": "",
    "adminuser": "oxadmin"
  },
  "master": {
    "adminpass": "jticMTjQ85EOe,VjP4QE",
    "adminuser": "oxadminmaster"
  }
}

-------------------------------------------------------------------

Reproducable with the ox-appsuite-upgrade Jenkins job (without the workaround): https://jenkins2022.knut.univention.de/job/UCS-5.0/job/UCS-5.0-5/view/Product%20Tests/job/product-test-component-ox-appsuite-upgrade/13/

1. install oxseforucs=7.10.6-ucs3
2. install ox-connector
3. upgrade oxseforucs