Password reset fails with error

UCS - Univention Corporate Server
#1

Hi,

today i did the 5.0.3 update. After the Update i simply check all features.

the password reset fails.

Background:
The Users can access the replica node to use “forget password”

If i type in my test user, i get this:
image

Log on replica:
management-console-web-server.log

16.02.23 11:04:18.714  MAIN        ( PROCESS ) : CPCommand (10.0.0.101:52074) response result: None
16.02.23 11:05:01.504  MAIN        ( PROCESS ) : CPCommand (10.0.0.101:58580) response status code: 591
16.02.23 11:05:01.504  MAIN        ( PROCESS ) : CPCommand (10.0.0.101:58580) response reason : None
16.02.23 11:05:01.504  MAIN        ( PROCESS ) : CPCommand (10.0.0.101:58580) response message: Interner Server-Fehler in "passwordreset/get_reset_methods".

log on primary:
management-console-module-passwordreset.log

16.02.23 11:03:14.008  DEBUG_INIT
16.02.23 11:03:14.831  MODULE      ( PROCESS ) : Loading Python module.
16.02.23 11:03:15.313  MODULE      ( PROCESS ) : Imported Python module.
16.02.23 11:03:15.313  MODULE      ( PROCESS ) : Module instance created.
16.02.23 11:03:15.314  MODULE      ( PROCESS ) : Module socket initialized.
16.02.23 11:03:15.350  MODULE      ( PROCESS ) : Setting user LDAP DN 'cn=secondary,cn=dc,cn=computers,dc=domain,dc=tld'
16.02.23 11:03:15.350  MODULE      ( PROCESS ) : Setting auth type to Ntld
16.02.23 11:03:15.350  MODULE      ( PROCESS ) : Initializing module.
16.02.23 11:03:15.376  MODULE      ( PROCESS ) : get_plugins(): Plugin class 'SendWithExternal' for sending method 'Ntld' is disabled.
16.02.23 11:03:15.381  MODULE      ( PROCESS ) : get_plugins(): Loaded sending plugin class 'SendEmail' for sending method 'email'.
16.02.23 11:03:15.386  MODULE      ( PROCESS ) : get_plugins(): Loaded sending plugin class 'VerifyEmail' for sending method 'verify_email'.
16.02.23 11:03:15.396  MODULE      ( PROCESS ) : get_plugins(): Plugin class 'SendSMS' for sending method 'mobile' is disabled.
16.02.23 11:03:15.396  MODULE      ( PROCESS ) : get_plugins(): plugin class 'SendEmail' for sending method 'email': udm_property: 'PasswordRecoveryEmail' token_length: '64'
16.02.23 11:03:15.396  MODULE      ( PROCESS ) : get_plugins(): plugin class 'VerifyEmail' for sending method 'verify_email': udm_property: 'PasswordRecoveryEmailVerified' token_length: '64'
16.02.23 11:03:15.408  MODULE      ( ERROR   ) : prevent_denial_of_service() could not find username argument. self: <univention.management.console.modules.passwordreset.Instance object at 0x7fc61cddc6d8> args: (<univention.management.console.protocol.message.Message object at 0x7fc613fdcfd0>,) kwargs: {} exception: Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/management/console/modules/passwordreset/__init__.py", line 169, in _decorated
    username = args[0].options["username"]
KeyError: 'username'

16.02.23 11:03:15.410  MODULE      ( PROCESS ) : Interner Server-Fehler in "passwordreset/get_reset_methods".

management-console-server.log

16.02.23 11:11:56.990  MODULE      ( PROCESS ) : Setting auth type to None
16.02.23 11:11:57.150  MAIN        ( PROCESS ) : running: /usr/bin/python3 /usr/sbin/univention-management-console-module -m passwordreset -s /run/univention-management-console/1093-1676542317150.socket -d 2 -l de_DE.UTF-8
16.02.23 11:11:59.627  MAIN        ( WARN    ) : Client: _recv: error on socket: [Errno 104] Die Verbindung wurde vom Kommunikationspartner zurückgesetzt
16.02.23 11:11:59.627  MAIN        ( WARN    ) : Socket died (module=udm)
16.02.23 11:11:59.627  MAIN        ( WARN    ) : Module process udm died (pid: 9109, exit status: -1, signal: -1, status: -1)
16.02.23 11:11:59.628  MAIN        ( WARN    ) : Cleaning up requests
16.02.23 11:11:59.628  MAIN        ( WARN    ) : Invalidating all pending requests 167654231962506-15
16.02.23 11:11:59.628  MAIN        ( PROCESS ) : ModuleProcess: stopping 9109
16.02.23 11:11:59.628  MAIN        ( WARN    ) : Socket died (module=udm)
16.02.23 11:11:59.774  MAIN        ( WARN    ) : Socket died (module=join)
16.02.23 11:11:59.775  MAIN        ( WARN    ) : Module process join died (pid: 9111, exit status: -1, signal: -1, status: -1)
16.02.23 11:11:59.775  MAIN        ( WARN    ) : Cleaning up requests
16.02.23 11:11:59.775  MAIN        ( PROCESS ) : ModuleProcess: stopping 9111
16.02.23 11:11:59.775  MAIN        ( WARN    ) : Socket died (module=join)
16.02.23 11:11:59.967  MAIN        ( WARN    ) : Socket died (module=updater)
16.02.23 11:11:59.967  MAIN        ( WARN    ) : Module process updater died (pid: 9122, exit status: -1, signal: -1, status: -1)
16.02.23 11:11:59.968  MAIN        ( WARN    ) : Cleaning up requests
16.02.23 11:11:59.968  MAIN        ( PROCESS ) : ModuleProcess: stopping 9122
16.02.23 11:11:59.968  MAIN        ( WARN    ) : Socket died (module=updater)
16.02.23 11:12:00.203  MAIN        ( WARN    ) : Client: _recv: error on socket: [Errno 104] Die Verbindung wurde vom Kommunikationspartner zurückgesetzt
16.02.23 11:12:00.204  MAIN        ( WARN    ) : Socket died (module=appcenter)
16.02.23 11:12:00.204  MAIN        ( WARN    ) : Module process appcenter died (pid: 9124, exit status: -1, signal: -1, status: -1)
16.02.23 11:12:00.204  MAIN        ( WARN    ) : Cleaning up requests
16.02.23 11:12:00.204  MAIN        ( WARN    ) : Invalidating all pending requests 167654231999777-17
16.02.23 11:12:00.204  MAIN        ( PROCESS ) : ModuleProcess: stopping 9124
16.02.23 11:12:00.205  MAIN        ( WARN    ) : Socket died (module=appcenter)
16.02.23 11:12:08.160  MAIN        ( WARN    ) : Socket died (module=ucr)
16.02.23 11:12:08.161  MAIN        ( WARN    ) : Module process ucr died (pid: 9250, exit status: -1, signal: -1, status: -1)
16.02.23 11:12:08.161  MAIN        ( WARN    ) : Cleaning up requests
16.02.23 11:12:08.161  MAIN        ( PROCESS ) : ModuleProcess: stopping 9250
16.02.23 11:12:08.161  MAIN        ( WARN    ) : Socket died (module=ucr)

Systemcheck ran fine, no errors on all mashines.

Any idea? i didnt find any similar in the Forum.

Thanks

#2

I am experiencing the same issue after updating a customer to 5.0-3 errata577.
The password reset functionality is crucial in this usecase.

Just for the record: before the update it had been working fine.

Can anybody help, please?

#3

latest 5.0.3 , with all patches applied
I see the following with s master & replica:

01.03.23 09:55:23.229  MAIN        ( PROCESS ) : running: /usr/bin/python3 /usr/sbin/univention-management-console-module -m passwordreset -s /run/univention-management-console/4698-1677635723229.socket -d 2 -l en_US.UTF-8
01.03.23 09:55:27.433  LOCALE      ( WARN    ) : Could not find translation file: 'umc-core.mo'
01.03.23 09:55:27.433  MAIN        ( PROCESS ) : running: /usr/bin/python3 /usr/sbin/univention-management-console-module -m passwordreset -s /run/univention-management-console/4698-1677635727433.socket -d 2 -l en_US.UTF-8
01.03.23 09:55:55.756  MAIN        ( WARN    ) : Socket died (module=passwordreset)
01.03.23 09:55:55.787  MAIN        ( PROCESS ) : ModuleProcess: child 21613 exited with 0
01.03.23 09:55:59.596  MAIN        ( WARN    ) : Socket died (module=passwordreset)
01.03.23 09:55:59.625  MAIN        ( PROCESS ) : ModuleProcess: stopping 21613
01.03.23 09:55:59.625  MAIN        ( WARN    ) : Socket died (module=passwordreset)
01.03.23 09:55:59.625  MAIN        ( PROCESS ) : ModuleProcess: child 21622 exited with 0
01.03.23 09:56:03.471  MAIN        ( PROCESS ) : ModuleProcess: stopping 21622
01.03.23 09:56:03.471  MAIN        ( WARN    ) : Socket died (module=passwordreset)

but interestingly enough , the email arrived for the user…

did you check the users config for PW reset has the email etc…, since it is nto stored in the LDAP , but an external postgresql database.

#4

Add us to the list. Just discovered this today.

#5

Appears this was fixed in latest errata 609 release: Security and bugfix errata for Univention Corporate Server

Mastodon