Univention Bugzilla – Bug 42033
Test case 90_ucsschool.24_password_reset_by_all_types_of_users fails
Last modified: 2023-03-25 06:55:24 CET
The test case 90_ucsschool.24_password_reset_by_all_types_of_users fails: http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Multiserver/205/SambaVersion=s4-only-master/testReport/90_ucsschool/24_password_reset_by_all_types_of_users/test/ ---------------------------------------------------------------------------- *** BEGIN *** ['/usr/bin/python', '24_password_reset_by_all_types_of_users'] *** *** 90_ucsschool/24_password_reset_by_all_types_of_users *** ucs-school-reset-password-check *** *** START TIME: 2016-08-18 10:03:49 *** *** It is not allowed to set the master as name_edudc ==> resetting name_edudc *** Creating new OU '4thpz' Object created: cn=ou-default-ucr-policy,cn=policies,ou=4thpz,dc=autotest203,dc=local Object modified: cn=ou-default-ucr-policy,cn=policies,ou=4thpz,dc=autotest203,dc=local Object modified: ou=4thpz,dc=autotest203,dc=local 40dhcpsearchbase_create: added new UCR policy cn=ou-default-ucr-policy,cn=policies,ou=4thpz,dc=autotest203,dc=local to OU ou=4thpz,dc=autotest203,dc=local 45dhcpdns_create: modifying OU 4thpz ... Object created: cn=dhcp-dns-4thpz,cn=policies,ou=4thpz,dc=autotest203,dc=local Object modified: cn=dhcp,ou=4thpz,dc=autotest203,dc=local 45dhcpdns_create: done Object created: cn=Marktplatz,cn=shares,ou=4thpz,dc=autotest203,dc=local 52marktplatz_create: added new share Markplatz for server dc4thpz-01.autotest203.local Object created: cn=examusers,ou=4thpz,dc=autotest203,dc=local Object created: cn=OU4thpz-Klassenarbeit,cn=ucsschool,cn=groups,dc=autotest203,dc=local 60schoolexam-master: Exam container 'cn=examusers,ou=4thpz' and group 'OU4thpz-Klassenarbeit' created. *** Result of School(...).create(): True Waiting for replication... Done: replication complete. Creating users/user object with /usr/sbin/udm-test users/user create --position cn=users,dc=autotest203,dc=local --set username=rttbm7tc8o --set password=univention --set firstname=w62t430h9i --set lastname=menz00a88n . Waiting for DRS replication, filter: 'cn=rttbm7tc8o' . . . . DRS replication took 4 seconds Creating users/user object with /usr/sbin/udm-test users/user create --position cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local --set username=tnfwbmofvy --set school=4thpz --set firstname=zdzpgkhlpj --set lastname=ivmqogluvu --append groups=cn=admins-4thpz,cn=ouadmins,cn=groups,dc=autotest203,dc=local --set password=univention . Waiting for DRS replication, filter: 'cn=tnfwbmofvy' DRS replication took 0 seconds Waiting for replication... Done: replication complete. Creating users/user object with /usr/sbin/udm-test users/user create --position cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local --set username=avl6kqdy9n --set school=4thpz --set firstname=p2eji2sczw --set lastname=tbv03zbkvo --append 'groups=cn=Domain Admins,cn=groups,dc=autotest203,dc=local' --set password=univention . Waiting for DRS replication, filter: 'cn=avl6kqdy9n' DRS replication took 0 seconds *** Creating new user 'djn2mqe7xi' with {'disabled': False, 'school': '4thpz', 'name': 'djn2mqe7xi', 'firstname': 'hojrrwvwqk', 'schools': ['4thpz'], 'lastname': 'uthnzyyojj', 'password': 'univention', 'email': '', 'school_classes': {}}. *** Result of User(...).create(): True Waiting for replication... . Done: replication complete. *** Creating new user 'p0wkb33x3p' with {'disabled': False, 'school': '4thpz', 'name': 'p0wkb33x3p', 'firstname': 'livehsetnw', 'schools': ['4thpz'], 'lastname': 'wcsdkzeaog', 'password': 'univention', 'email': '', 'school_classes': {}}. *** Result of User(...).create(): True Waiting for replication... . Done: replication complete. Creating users/user object with /usr/sbin/udm-test users/user create --position cn=users,dc=autotest203,dc=local --set username=ownpggcgli --set password=univention --set firstname=fohe374hoy --set lastname=rfo0e98pnw . Waiting for DRS replication, filter: 'cn=ownpggcgli' DRS replication took 0 seconds Creating users/user object with /usr/sbin/udm-test users/user create --position cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local --set username=sfg2xxa32n --set school=4thpz --set firstname=zwrasjimsk --set lastname=jspmyputic --append groups=cn=admins-4thpz,cn=ouadmins,cn=groups,dc=autotest203,dc=local --set password=univention . Waiting for DRS replication, filter: 'cn=sfg2xxa32n' DRS replication took 0 seconds Waiting for replication... Done: replication complete. Creating users/user object with /usr/sbin/udm-test users/user create --position cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local --set username=f94tsvwyyl --set school=4thpz --set firstname=jrir9a7leq --set lastname=v58aof87an --append 'groups=cn=Domain Admins,cn=groups,dc=autotest203,dc=local' --set password=univention . Waiting for DRS replication, filter: 'cn=f94tsvwyyl' DRS replication took 0 seconds *** Creating new user 'xcwbi80enx' with {'disabled': False, 'school': '4thpz', 'name': 'xcwbi80enx', 'firstname': 'aofxgscree', 'schools': ['4thpz'], 'lastname': 'rkmragzyup', 'password': 'univention', 'email': '', 'school_classes': {}}. *** Result of User(...).create(): True Waiting for replication... . Done: replication complete. *** Creating new user 'zvrnekul2g' with {'disabled': False, 'school': '4thpz', 'name': 'zvrnekul2g', 'firstname': 'wasjlwkqwt', 'schools': ['4thpz'], 'lastname': 'upbjaltfbw', 'password': 'univention', 'email': '', 'school_classes': {}}. *** Result of User(...).create(): True Waiting for replication... . Done: replication complete. Waiting for replication... Done: replication complete. Waiting for postrun... Number of test cases = : 100 * 0 - school admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] SKIPPED see bug #35447 * 1 - school admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] SKIPPED see bug #35447 * 2 - school admin => domain admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('f94tsvwyyl', 'uid=f94tsvwyyl,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] SKIPPED see bug #35447 * 3 - school admin => domain admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('f94tsvwyyl', 'uid=f94tsvwyyl,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] SKIPPED see bug #35447 * 4 - school admin => teacher [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('xcwbi80enx', 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': '0l58ca2ytm', 'nextLogin': True, 'userDN': 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 5 - school admin => teacher [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('xcwbi80enx', 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': 'jdzxtkgym7', 'nextLogin': False, 'userDN': 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 6 - school admin => student [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('zvrnekul2g', 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': 'xy7aig5uj0', 'nextLogin': True, 'userDN': 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 7 - school admin => student [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('zvrnekul2g', 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': '2if82il8g3', 'nextLogin': False, 'userDN': 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 8 - school admin => global user [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('ownpggcgli', 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': '3tf48r7g9d', 'nextLogin': True, 'userDN': 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'} *** UMC response: u'permission denied' Waiting for replication... Done: replication complete. Waiting for connector replication * 9 - school admin => global user [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'teacher', ('ownpggcgli', 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': 'jvmvkbam87', 'nextLogin': False, 'userDN': 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'} *** UMC response: u'permission denied' Waiting for replication... Done: replication complete. Waiting for connector replication * 10 - school admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] SKIPPED see bug #35447 * 11 - school admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] SKIPPED see bug #35447 * 12 - school admin => domain admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('f94tsvwyyl', 'uid=f94tsvwyyl,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] SKIPPED see bug #35447 * 13 - school admin => domain admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('f94tsvwyyl', 'uid=f94tsvwyyl,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] SKIPPED see bug #35447 * 14 - school admin => teacher [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('xcwbi80enx', 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': '6zwp8xadu5', 'nextLogin': True, 'userDN': 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 15 - school admin => teacher [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('xcwbi80enx', 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': 'ygsdq5jo6o', 'nextLogin': False, 'userDN': 'uid=xcwbi80enx,cn=lehrer,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 16 - school admin => student [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('zvrnekul2g', 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': 'v24l56nt80', 'nextLogin': True, 'userDN': 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 17 - school admin => student [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('zvrnekul2g', 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': 'vjpmw0zbxg', 'nextLogin': False, 'userDN': 'uid=zvrnekul2g,cn=schueler,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True Waiting for replication... Done: replication complete. Waiting for connector replication * 18 - school admin => global user [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('ownpggcgli', 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': '8fglztxou8', 'nextLogin': True, 'userDN': 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'} *** UMC response: u'permission denied' Waiting for replication... Done: replication complete. Waiting for connector replication * 19 - school admin => global user [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['tnfwbmofvy', 'student', ('ownpggcgli', 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'), False, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (student) data = {'newPassword': 'sk2ozl4t5y', 'nextLogin': False, 'userDN': 'uid=ownpggcgli,cn=users,dc=autotest203,dc=local'} *** UMC response: u'permission denied' Waiting for replication... Done: replication complete. Waiting for connector replication * 20 - domain admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['avl6kqdy9n', 'teacher', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': '7dlv54dhb6', 'nextLogin': True, 'userDN': 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True ### FAIL ### umcp command schoolusers/password/reset result: True, expected: 'permission denied' ### ### *** Cleanup after exception: <type 'exceptions.SystemExit'> 1 *** Purging OU 4thpz and related objects *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=OU4thpz-Member-Verwaltungsnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local'] Object removed: cn=OU4thpz-Member-Verwaltungsnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=OU4thpz-Member-Edukativnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local'] Object removed: cn=OU4thpz-Member-Edukativnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=OU4thpz-Klassenarbeit,cn=ucsschool,cn=groups,dc=autotest203,dc=local'] Object removed: cn=OU4thpz-Klassenarbeit,cn=ucsschool,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=OU4thpz-DC-Verwaltungsnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local'] Object removed: cn=OU4thpz-DC-Verwaltungsnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=OU4thpz-DC-Edukativnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local'] Object removed: cn=OU4thpz-DC-Edukativnetz,cn=ucsschool,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'groups/group', 'remove', '--dn', 'cn=admins-4thpz,cn=ouadmins,cn=groups,dc=autotest203,dc=local'] Object removed: cn=admins-4thpz,cn=ouadmins,cn=groups,dc=autotest203,dc=local *** Calling following command: ['/usr/sbin/udm-test', 'container/ou', 'remove', '--dn', 'ou=4thpz,dc=autotest203,dc=local'] Object removed: ou=4thpz,dc=autotest203,dc=local *** Purging OU 4thpz and related objects (ou=4thpz,dc=autotest203,dc=local): done Waiting for replication... . . Done: replication complete. *** END TIME: 2016-08-18 10:08:36 *** *** TEST DURATION (H:MM:SS.ms): 0:04:47.130552 *** *** END *** 1 *** ----------------------------------------------------------------------------
Shows this test result Bug #35447 and Bug #35650? If yes, my suggestion is to skip these tests, otherwise we don't recognize regressions.
(In reply to Stefan Gohmann from comment #1) > Shows this test result Bug #35447 and Bug #35650? If yes, my suggestion is > to skip these tests, otherwise we don't recognize regressions. Yes, this is the case for #35650. Please deactivate this specific test case and if disabled (commented out if possible), add a note at #35650 to reenable the test case if the bug is fixed.
(In reply to Sönke Schwardt-Krummrich from comment #2) > (In reply to Stefan Gohmann from comment #1) > > Shows this test result Bug #35447 and Bug #35650? If yes, my suggestion is > > to skip these tests, otherwise we don't recognize regressions. > > Yes, this is the case for #35650. Please deactivate this specific test case > and if disabled (commented out if possible), add a note at #35650 to > reenable the test case if the bug is fixed. It seems to be not really Bug #35650. Bug #35650 is about " * 0 - school admin => school admin". This test case is about " * 20 - domain admin => school admin": ------------------------------------------------------------------------------ * 20 - domain admin => school admin [acting_user, flavor, (target_user, target_user_dn), chg_pwd_on_nxt_login, expected_reset_result] ['avl6kqdy9n', 'teacher', ('sfg2xxa32n', 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'), True, 'command forbidden'] *** UMC request: "command/schoolusers/password/reset" (teacher) data = {'newPassword': '7dlv54dhb6', 'nextLogin': True, 'userDN': 'uid=sfg2xxa32n,cn=admins,cn=users,ou=4thpz,dc=autotest203,dc=local'} *** UMC response: True ### FAIL ### umcp command schoolusers/password/reset result: True, expected: 'permission denied' ### ### *** Cleanup after exception: <type 'exceptions.SystemExit'> 1 ------------------------------------------------------------------------------ Due to Bug #35447 the following settings are skipped: - school admin => school admin - school admin => domain admin - domain admin => global user So, should it be allowed for Domain Admins to reset the password of School Admins?
(In reply to Stefan Gohmann from comment #3) > Due to Bug #35447 the following settings are skipped: > > - school admin => school admin > - school admin => domain admin These two tests are still disabled. > - domain admin => global user I reenabled this test. > So, should it be allowed for Domain Admins to reset the password of School > Admins? Yes, domain admins are always allowed to reset passwords of any type of user account. I fixed the test logic of the test accordingly. ucs-test-ucsschool (3.0.15-12): r72210 | Bug #42033: fixed order of test case setup and debug output r72207 | Bug #35447, #42033: domain admin is allowed to reset all passwords
OK: test runs for domain admins OK: code change OK: test runs successful in manual test and by jenkins