uidNumber/gidNumber doesn't work when we use the webservice and a template

Description

Hello, I want to create a user through the webservice with a fixed uidNumber and gidNumber.

Distribution Name and Version

Debian

FusionDirectory Version

1.4

Plugin with the defect

Webservice

PHP version used

PHP7

Origin of php packages

Debian

Steps to Reproduce

I first create a template that tick "force uidNumber and gidNumber"

dn: cn=test,ou=templates,ou=people,dc=demo-fusiondirectory,dc=org
objectClass: fdTemplate
fdTemplateField: force_ids:TRUE
fdTemplateField: loginShell:/bin/ash
fdTemplateField: mustchangepassword:FALSE
fdTemplateField: objectClass:inetOrgPerson
fdTemplateField: objectClass:organizationalPerson
fdTemplateField: objectClass:person
fdTemplateField: objectClass:posixAccount
fdTemplateField: objectClass:shadowAccount
fdTemplateField: userPassword:%askme%
cn: test

Source the next script after installing jq and fill URL, LOGIN, PASSWORD

#!/bin/env bash

declare URL=''
declare LOGIN=''
declare PASSWORD=''

# Short CURL
function C(){
  command -- "curl" "-s" "-H" "Content-Type: application/json" "${URL}${@}"
}

# Grab TOKEN
TOKEN=$(C \
  '/login' \
  -X POST \
  --data \
  '{
    "user": "'"$LOGIN"'",
    "password": "'"$PASSWORD"'"
  }'
)
TOKEN=$(tr -d '"' <<< "$TOKEN")

# Redfine C
function C(){
  command -- "curl" "-s" "-H" "Content-Type: application/json" "-H" "SESSION-TOKEN: $TOKEN" "${URL}${@}" | jq .
}

Use the command to try creating the user I fill only uid, sn, givenName, homeDirectory and uidNumber gidNumber.

$ C /objects/user -X POST --data '{ "attrs": { "user": { "givenName": "givenname", "sn": "surname", "uid": "uid1", "userPassword": "test" }, "posixAccount": { "homeDirectory": "/home/uid", "uidNumber": 5000, "gidNumber": 5001 } }, "template": "cn=test,ou=templates,ou=people,dc=demo-fusiondirectory,dc=org"}'
[
  {
    "class": "WebServiceError",
    "message": "new > Unix > User id: Attribute uidNumber is disabled, its value could not be set",
    "line": 695,
    "file": "/usr/share/fusiondirectory/include/webservice/class_fdRPCService.inc"
  }
]

Expected behavior:

Creating the user with the right uid and gid number

Actual behavior:

It shows an error

Reproduces how often: 100

added plugin-webservice label

assigned to @cchilliet

changed the description

changed due date to August 31, 2021

added PJ1802-0188 label

You can create such a user through webservice by setting force_ids to true:

{
  "attrs": {
    "user": {
      "givenName": "givenname",
      "sn": "surname",
      "uid": "uid1",
      "userPassword": "testauieuaieueai"
    },
    "posixAccount": {
      "homeDirectory": "/home/uid",
      "force_ids": true,
      "uidNumber": 5000,
      "gidNumber": 5001
    }
  }
}

You do not need a template.

added 30m of time spent

added To Be Tested label

assigned to @jswaelens and unassigned @cchilliet

changed milestone to %FusionDirectory 1.4

It still shows that there is an issue about "creation from a template".

Another case is if we want to specify SameHomePath on a specific drive that is fixed in a template.

Webservice request and response

C /objects/user -X POST --data '{ "attrs": { "user": { "sn": "b", "givenName": "b", "uid": "c", "userPassword": "b"}, "sambaAccount": { "sambaHomePath": "\\OUPS" } }, "template": "cn=samba,ou=templates,ou=people,dc=demo-fusiondirectory,dc=org" }'
[
  {
    "class": "WebServiceError",
    "message": "new > Samba > Home directory path: Attribute sambaHomePath is disabled, its value could not be set",
    "line": 695,
    "file": "/usr/share/fusiondirectory/include/webservice/class_fdRPCService.inc"
  }
]

Template content

cn=samba,ou=templates,ou=people
createTimestamp     2021-09-07 17:05:40
modifyTimestamp     2021-09-07 17:13:32
objectClass     fdTemplate
fdTemplateField     force_ids:FALSE
fdTemplateField     homeDirectory:/home/a
fdTemplateField     loginShell:/bin/ash
fdTemplateField     mustchangepassword:FALSE
fdTemplateField     objectClass:inetOrgPerson
fdTemplateField     objectClass:organizationalPerson
fdTemplateField     objectClass:person
fdTemplateField     objectClass:posixAccount
fdTemplateField     objectClass:sambaSamAccount
fdTemplateField     objectClass:shadowAccount
fdTemplateField     sambaAcctFlags:[U ]
fdTemplateField     sambaDomainName:DEFAULT
fdTemplateField     sambaHomeDrive:D:
fdTemplateField     sambaMungedDial:IAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAUAAEABoACAABAEMAdAB4AEMAZgBnAFAAcgBlAHMAZQBuAHQANTUxZTBiYjAYAAgAAQBDAHQAeABDAGYAZwBGAGwAYQBnAHMAMQAwMGUwMDAxMBIACAABAEMAdAB4AFMAaABhAGQAbwB3ADAxMDAwMDAwKgACAAEAQwB0AHgATQBpAG4ARQBuAGMAcgB5AHAAdABpAG8AbgBMAGUAdgBlAGwAMDA=
fdTemplateField     userPassword:%askme%
cn     samba

added 30m of time spent

hello @cchilliet @jswaelens

what are you proposing to fix this issues ?

Cheers

added 5m of time spent

@bmortier In FusionDirectory GUI, when you use a template to create an object, after applying the template you are able to edit the object before saving it to the LDAP. We cannot do that in the WebService because it is stateless.

So if you need to fill a field on an object created with a template through the webservice, either you edit the object after the creation in a second webservice operation, or you set this field as %askme% in the template to be able to provision it when creating through this template.

mentioned in commit aed0f675

mentioned in commit aabefbdd

marked this issue as related to #6155 (closed)

removed due date

added templates label

assigned to @tdockx and unassigned @jswaelens

Hello @aangaman if I remember correctly it is fixed but it would be nice to have a manual test and maybe selenium test too.

Cheers

assigned to @aangaman and unassigned @tdockx

@jswaelens I checked and you right, it is fixed. I close the issue and will add the manual and testing in selenium.

Cheers

closed

removed To Be Tested label

added Fixed label