Change Password Expiration fails if user is member of a group

[flatspin (Ralf Jeckel)]

@flatspin

Sep 9 12:18:17 newns7 esmith::event[8238]: Event: user-modify SUCCESSSep 9 12:18:18 newns7 esmith::event[8260]: Event: group-modify netusers@jeckel.lan user2 user1 domain users s-1-5-4 s-1-5-11Sep 9 12:18:18 newns7 esmith::event[8260]: ERROR(exception): Failed to remove members “S-1-5-4,S-1-5-11,Domain,Users” from group “netusers” - Unable to find “Domain”. Operation cancelled.

I still have this issue. It apears when I try to enable/disable the password expiration of a user.

Installation: NS7 beta 2, all updates, nethserver-file-server,nethserver-dc-1.0.3-1.ns7.x86_64, reboot after installation of nsdc update to 1.0.3

Workaround: delete user from group(s) change expiration and add it again to group(s)

Can anybody confirm this? Thank you!

[davidep (Davide Principi)]

@flatspin

S-1-5-4,S-1-5-11,Domain,Users

This seems odd to me and hard to reproduce

[flatspin (Ralf Jeckel)]

I’ll do brand new installation tommorow. Maybe I can reproduce this.

What I did is: create 3 or 4 users, create a group and add 2 users to this group. Then I tried to change password expiration in user panel of a user witch is member of the group and got a failure message. Shouldn’t be that hard to reproduce if there is really a bug.

[flatspin (Ralf Jeckel)]

o.k. did a full new unattended installation / all updates. incl. nethserver-dc 1.0.4
created users, created empty group without messages, added user to group,
user modify change password expiration works without error.

Sep 13 16:58:16 ns7test esmith::event[26055]: Added group group1
Sep 13 16:58:16 ns7test esmith::event[26055]: Action: /etc/e-smith/events/group-create/S40nethserver-dc-group-create SUCCESS [0.615387]
Sep 13 16:58:16 ns7test esmith::event[26055]: Action: /etc/e-smith/events/group-create/S90nethserver-sssd-clear-cache SUCCESS [0.072953]
Sep 13 16:58:16 ns7test esmith::event[26055]: Event: group-create SUCCESS
Sep 13 16:58:29 ns7test esmith::event[26108]: Event: group-modify group1@ns7.lan user1
Sep 13 16:58:30 ns7test esmith::event[26108]: Added members to group group1
Sep 13 16:58:30 ns7test esmith::event[26108]: Action: /etc/e-smith/events/group-modify/S40nethserver-dc-group-modify SUCCESS [1.063089]
Sep 13 16:58:30 ns7test esmith::event[26108]: Action: /etc/e-smith/events/group-modify/S90nethserver-sssd-clear-cache SUCCESS [0.093251]
Sep 13 16:58:30 ns7test esmith::event[26108]: Event: group-modify SUCCESS
Sep 13 16:58:56 ns7test esmith::event[26193]: Event: user-modify user1@ns7.lan Test User1 /usr/libexec/openssh/sftp-server
Sep 13 16:58:56 ns7test esmith::event[26193]: Action: /etc/e-smith/events/user-modify/S40nethserver-dc-user-modify SUCCESS [0.267967]
Sep 13 16:58:56 ns7test esmith::event[26193]: Action: /etc/e-smith/events/user-modify/S90nethserver-sssd-clear-cache SUCCESS [0.073669]
Sep 13 16:58:56 ns7test esmith::event[26193]: Event: user-modify SUCCESS
Sep 13 16:58:56 ns7test esmith::event[26215]: Event: group-modify group1@ns7.lan user1
Sep 13 16:58:57 ns7test esmith::event[26215]: Action: /etc/e-smith/events/group-modify/S40nethserver-dc-group-modify SUCCESS [0.466536]
Sep 13 16:58:57 ns7test esmith::event[26215]: Action: /etc/e-smith/events/group-modify/S90nethserver-sssd-clear-cache SUCCESS [0.072376]
Sep 13 16:58:57 ns7test esmith::event[26215]: Event: group-modify SUCCESS
Sep 13 16:58:57 ns7test esmith::event[26237]: Event: password-policy-update user1@ns7.lan yes
Sep 13 16:58:57 ns7test esmith::event[26237]: Action: /etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache SUCCESS [0.089368]
Sep 13 16:58:58 ns7test esmith::event[26237]: Expiry for user ‘user1’ set to 180 days.
Sep 13 16:58:58 ns7test esmith::event[26237]: Action: /etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy SUCCESS [0.655158]
Sep 13 16:58:58 ns7test esmith::event[26237]: Event: password-policy-update SUCCESS
Sep 13 16:59:10 ns7test esmith::event[26292]: Event: user-modify user1@ns7.lan Test User1 /usr/libexec/openssh/sftp-server
Sep 13 16:59:10 ns7test esmith::event[26292]: Action: /etc/e-smith/events/user-modify/S40nethserver-dc-user-modify SUCCESS [0.281493]
Sep 13 16:59:11 ns7test esmith::event[26292]: Action: /etc/e-smith/events/user-modify/S90nethserver-sssd-clear-cache SUCCESS [0.081469]
Sep 13 16:59:11 ns7test esmith::event[26292]: Event: user-modify SUCCESS
Sep 13 16:59:11 ns7test esmith::event[26314]: Event: group-modify group1@ns7.lan user1
Sep 13 16:59:11 ns7test esmith::event[26314]: Action: /etc/e-smith/events/group-modify/S40nethserver-dc-group-modify SUCCESS [0.441542]
Sep 13 16:59:12 ns7test esmith::event[26314]: Action: /etc/e-smith/events/group-modify/S90nethserver-sssd-clear-cache SUCCESS [0.173708]
Sep 13 16:59:12 ns7test esmith::event[26314]: Event: group-modify SUCCESS
Sep 13 16:59:12 ns7test esmith::event[26335]: Event: password-policy-update user1@ns7.lan no
Sep 13 16:59:12 ns7test esmith::event[26335]: Action: /etc/e-smith/events/password-policy-update/S10nethserver-sssd-clear-cache SUCCESS [0.071916]
Sep 13 16:59:12 ns7test esmith::event[26335]: Expiry for user ‘user1’ disabled.
Sep 13 16:59:12 ns7test esmith::event[26335]: Action: /etc/e-smith/events/password-policy-update/S30nethserver-dc-password-policy SUCCESS [0.599764]
Sep 13 16:59:12 ns7test esmith::event[26335]: Event: password-policy-update SUCCESS

No issue anymore. Seems it was related to old installation.
I think we can forget this at the moment.