40986 – Unclear that login at UMC needs to be done as user "Administrator" with the same password as root

Bug 40986 - Unclear that login at UMC needs to be done as user "Administrator" with the same password as root

Summary: Unclear that login at UMC needs to be done as user "Administrator" with the s...

Status:	CLOSED FIXED

Alias:	None

Product:	UCS
Classification:	Unclassified
Component:	UMC (Generic)
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P5 normal
Target Milestone:	UCS 4.2-0-errata
Assignee:	Florian Best
QA Contact:	Johannes Keiser

URL:
Keywords:

Duplicates (2):	33248 39046 (view as bug list)
Depends on:
Blocks:

Reported:	2016-04-04 14:14 CEST by Alexander Kläser
Modified:	2017-06-15 17:57 CEST (History)
CC List:	5 users (show)

See Also:	42174
What kind of report is it?:	Bug Report
What type of bug is this?:	6: Setup Problem: Issue for the setup process
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.309
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2016030521001602, 2016021621000541, 2015112121000024, 2016032421000185, 2015072921000607, 2016052721000738, 2016060521000116, 2016060321000183, 2016071821000126, 2016071721000459, 2016092921000736, 2017012621000291, 2017020921000365, 2017042621000632
Bug group (optional):	External feedback, Usability
Customer ID:
Max CVSS v3 score:

Attachments
Mockup of login page (63.63 KB, image/png) 2017-02-08 10:44 CET, Alexander Kläser	Details
Screenshot (192.98 KB, image/png) 2017-05-18 18:26 CEST, Florian Best	Details
Login on Firefox >= 52 with insecure connection (28.10 KB, image/png) 2017-05-23 13:00 CEST, Johannes Keiser	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Kläser

2016-04-04 14:14:39 CEST

We have already improved some aspects in order to guide the user at the first login using "Administrator" as user, however, we still receive feedback that testers had trouble logging in:
Ticket#2016030521001602
Ticket#2016021621000541
Ticket#2015112121000024 
Ticket#2016032421000185

+++ This bug was initially created as a clone of Bug #37804 +++

At the following review, the tester initially did not know with which user he should login to UMC:

http://linuxdenken.de/test-univention-4-0-1/

Certainly helpful would be a hint to login as user "Administrator" when visitting the UMC login for the first time.

Comment 1 Alexander Kläser

2016-04-06 10:54:40 CEST

See also Ticket#2015072921000607

Comment 2 Alexander Kläser

2016-04-06 10:55:11 CEST

*** Bug 39046 has been marked as a duplicate of this bug. ***

Comment 3 Alexander Kläser

2016-06-02 10:00:16 CEST

See also Ticket#2016052721000738

Comment 4 Alexander Kläser

2016-06-06 12:09:25 CEST

Reported again at Ticket#2016060521000116

Comment 5 Stefan Gohmann

2016-06-13 07:46:49 CEST

Reported again at Ticket#2016060321000183

Comment 6 Alexander Kläser

2016-08-01 11:18:49 CEST

Reported again: Ticket#2016071821000126

Comment 7 Alexander Kläser

2016-08-01 11:19:45 CEST

Reported again: Ticket#2016071721000459

Comment 8 Stefan Gohmann

2016-10-10 16:48:48 CEST

Once again: Ticket #2016092921000736

Comment 9 Stefan Gohmann

2017-02-02 07:14:55 CET

Once again Ticket#2017012621000291:

FEEDBACK: role and password policy have not been clear during setup.
after rebooting the graphical user interface came up (great!), but neither "admin" nor "root" worked.
- no hint on using "Administrator" instead of "admin"
- ssh to the IP, using root and looking up /etc/passwd didn't show the "Administrator"
- creating a new admin (nAdmin) and making nAdmin a superuser didn't help
- finally using the root password (worked on ssh!) for "Administrator" did the trick
-> very, very annoying and only few seconds before scrapping it and going to Zentyal

Comment 10 Alexander Kläser

2017-02-08 10:44:22 CET

Created attachment 8411 [details]
Mockup of login page

Attached the current mockup of the login page... I guess putting the text "Login for the first time?" with an additional help tooltip when clicking on it should help here.

Comment 11 Alexander Kläser

2017-02-08 10:44:59 CET

(In reply to Alexander Kläser from comment #10)
> Created attachment 8411 [details]
> Mockup of login page
> 
> Attached the current mockup of the login page... I guess putting the text
> "Login for the first time?" with an additional help tooltip when clicking on
> it should help here.

Or "How do I login?" as used in the mockup.

Comment 12 Erik Damrose

2017-02-08 10:57:05 CET

Idea: Prefill the username textbox with Administrator, as long as the Administrator has never successfully logged in at this machine

Comment 13 Florian Best

2017-02-09 17:07:53 CET

*** Bug 33248 has been marked as a duplicate of this bug. ***

Comment 14 Stefan Gohmann

2017-02-14 16:46:33 CET

Reported again, I've increased the impact because I'm unsure if everyone finds the solution. Ticket #2017020921000365

Comment 15 Florian Best

2017-02-16 16:10:24 CET

We should phrase a good sentence here, which also considers
* that some people use root which might be wrong
* root needs to be used for the initial system configuration
* the default username for managing the domain is Administrator (or the translated version in french)

Comment 16 Alexander Kläser

2017-03-06 16:15:14 CET

With UCS 4.2-0, the login page has been changed substantially. Let's wait whether this problem persists.

Comment 17 Florian Best

2017-04-18 10:34:04 CEST

Another feedback:
"""
I must say the UCS server installation and usage was incredibly easy— once I fixed a couple of initial misunderstanding:

    The administrative account is “Administrator” — not “root”
"""
https://itsfoss.com/univention-corporate-server/

Comment 18 Florian Best

2017-04-27 10:57:54 CEST

FEEDBACK: Benutzername für Administrator verwirrend. Man legt ROOT Benuter aber keine Administrator ein. Oder wäre ein Hinweis das gleiche Passwort für Administrator gültig oder auch ein anderes PAsswort eingeben.

Comment 19 Florian Best

2017-05-18 18:26:53 CEST

Created attachment 8865 [details]
Screenshot

(In reply to Florian Best from comment #18)
> FEEDBACK: Benutzername für Administrator verwirrend. Man legt ROOT Benuter
> aber keine Administrator ein. Oder wäre ein Hinweis das gleiche Passwort für
> Administrator gültig oder auch ein anderes PAsswort eingeben.

I am unsure about this feedback because we are saying twice in the system setup dialog that the password is for the user root and Administrator. Maybe the sentence can still be improved?

Comment 20 Florian Best

2017-05-18 18:27:08 CEST

When entering "root" in the login dialog a pop up is now shown which informs about the Administrator account.
The "Administrator" string is also taken from default_username() so that french systems or systems in AD domains show the correct username.

univention-management-console.yaml:
r79437 | YAML Bug #40986

univention-management-console (9.0.80-42):
r79436 | Bug #40986: display tooltip about Administrator user when entering root as username into the login dialog

Comment 21 Florian Best

2017-05-18 18:39:10 CEST

Do you think a sentence that the password is the same as the one for root is required?

Comment 22 Johannes Keiser

2017-05-23 13:00:57 CEST

Created attachment 8874 [details]
Login on Firefox >= 52 with insecure connection

Tested with following browsers:
    IE 11       -> OK
    EDGE 14     -> OK
    Safari 9.1  -> OK
    Mobile (iPhone 6S, Galaxy S6) -> OK
    Firefox 53  -> beginning with version 52 Firefox shows a native tooltip if an insecure connection is used for logins. That message covers the UMC tooltip. Is this a problem?
    

I think a sentence that the Administrator password is the same as the root password could be helpful since ~35% of the Tickets either think the password in the system setup is only for root or say that a hint that the Administrator password is the same as the root password would have been helpful.

Comment 23 Florian Best

2017-05-23 15:58:17 CEST

I put the tooltip above the input field and changed the sentence into:

+msgid "The default user to manage the domain is %s which has the same initial password as the <i>root</i> account."
+msgstr "Der Standardbenutzer zum Verwalten dieser Domäne ist %s mit demselben initialen Passwort des <i>root</i> Benutzers."

univention-management-console (9.0.80-43):
r79582 | Bug #40986: improove tooltip position and add hint about Administrator password

Comment 24 Johannes Keiser

2017-05-24 17:03:40 CEST

(In reply to Florian Best from comment #23)
> I put the tooltip above the input field and changed the sentence into:
> 
> +msgid "The default user to manage the domain is %s which has the same
> initial password as the <i>root</i> account."
> +msgstr "Der Standardbenutzer zum Verwalten dieser Domäne ist %s mit
> demselben initialen Passwort des <i>root</i> Benutzers."
> 
> univention-management-console (9.0.80-43):
> r79582 | Bug #40986: improove tooltip position and add hint about
> Administrator password

Changes OK
YAML    OK

-> verified

Comment 25 Janek Walkenhorst

2017-06-15 17:57:51 CEST

<http://errata.software-univention.de/ucs/4.2/40.html>