[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#886749: Password Sync to Kerberos fails for user DNs that have a blank in the DN



Package: debian-edu-config
Version: 1.944

We experienced an issue where the password sync from GOsa (via gosa-sync hook script) to Kerberos on a stretch TJENER fails for user DNs that have a blank in the DN.

Here we have DN OUs containing blanks, unfortunately.

The patch needs to be applied in our gosa.conf template (typical case of underquoting, see '%dn' bits):

```
diff --git a/etc/gosa/gosa.conf b/etc/gosa/gosa.conf
index 7c3a7df1..ba624d71 100644
--- a/etc/gosa/gosa.conf
+++ b/etc/gosa/gosa.conf
@@ -76,9 +76,9 @@
   <pathMenu>
<plugin acl="users/netatalk:self,users/environment:self,users/posixAccount:self,users/kolabAccount:self,users/phpscheduleitAccount:self,users/oxchangeAccount:self,users/proxyAccount:self,users/connectivity:self,users/pureftpdAccount:self,users/phpgwAccount:self,users/opengwAccount:self,users/pptpAccount:self,users/intranetAccount:self, users/webdavAccount:self,users/nagiosAccount:self,users/sambaAccount:self,users/mailAccount:self,users/groupware, users/user:self,users/scalixAccount:self,users/gofaxAccount:self,users/phoneAccount:self,users/Groupware:self" class="MyAccount" />
       <plugin acl="users/password:self" class="password"
- postmodify="USERPASSWORD=%new_password /usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-sync %dn" - postlock="/usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-lock-user %dn" - postunlock="/usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-unlock-user %dn" /> + postmodify="USERPASSWORD=%new_password /usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-sync '%dn'" + postlock="/usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-lock-user '%dn'" + postunlock="/usr/bin/sudo /usr/share/debian-edu-config/tools/gosa-unlock-user '%dn'" />
   </pathMenu>

```


Mike
--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

Attachment: pgp4QrU0PxeVA.pgp
Description: Digitale PGP-Signatur


Reply to: