LDAP: user gets Notification to add email address to change password, although email exists, is read-only and password change is not possible

[chaos-prevails]

Steps to reproduce

1. configure ldap and in advanced -> special attributes, set the email field to "mail"
2. login with an AD user
3. open the notification

Expected behaviour

For LDAP/AD/... users with read-only email fields and no guaranteed password-change ability (opt-in), the notification should say something different. (e.g. personalize your profile with a picture, phone number, find your federation ID, ...)

Actual behaviour

a notification is shown with misleading information: Add your profile information! For example your email is needed to reset your password

Server configuration

Operating system:
Ubuntu 16.04 64bit

Web server:
apache 2.4.6.
Database:
mariadb - stock Ubuntu 16.04
PHP version:
7.0.8
Nextcloud version: (see Nextcloud admin page)
11.0.0.10
Updated from an older Nextcloud/ownCloud or fresh install:
fresh
Where did you install Nextcloud from:
download from nextcloud homepage
Signing status:
"no errors have been found"

List of activated apps:
Enabled:

activity: 2.4.1
announcementcenter: 3.0.0
comments: 1.1.0
dav: 1.1.1
direct_menu: 0.10.0
federatedfilesharing: 1.1.1
federation: 1.1.1
files: 1.6.1
files_accesscontrol: 1.1.2
files_clipboard: 0.5.0
files_pdfviewer: 1.0.1
files_sharing: 1.1.1
files_texteditor: 2.2
files_trashbin: 1.1.0
files_versions: 1.4.0
files_videoplayer: 1.0.0
firstrunwizard: 2.0
gallery: 16.0.0
logreader: 2.0.0
lookup_server_connector: 1.0.0
nextcloud_announcements: 1.0
notifications: 1.0.1
password_policy: 1.1.0
provisioning_api: 1.1.0
serverinfo: 1.1.1
sharebymail: 1.0.1
survey_client: 0.1.5
systemtags: 1.1.3
theming: 1.1.1
twofactor_backupcodes: 1.0.0
updatenotification: 1.1.1
user_ldap: 1.1.1
workflowengine: 1.1.1
Disabled:
admin_audit
encryption
external
files_automatedtagging
files_external
files_retention
notes
spreed
templateeditor
user_external
user_saml

The content of config/config.php:
$CONFIG = array (
'instanceid' => 'X',
'passwordsalt' => 'X',
'secret' => 'X',
'trusted_domains' =>
array (
0 => 'X',
),
'datadirectory' => '/var/XX',
'overwrite.cli.url' => 'X',
'dbtype' => 'mysql',
'version' => '11.0.0.10',
'dbname' => 'nextcloud',
'dbhost' => 'localhost',
'dbport' => '',
'dbtableprefix' => 'oc_',
'dbuser' => 'X',
'dbpassword' => ':X',
'logtimezone' => 'UTC',
'installed' => true,
'mail_smtpmode' => 'smtp',
'mail_from_address' => 'iX',
'mail_domain' => 'X',
'mail_smtpauthtype' => 'LOGIN',
'mail_smtphost' => 'X' ,
'mail_smtpauth' => 1,
'mail_smtpport' => '465',
'mail_smtpname' => 'X',
'mail_smtppassword' => 'X',
'mail_smtpsecure' => 'ssl',
'ldapIgnoreNamingRules' => false,
'ldapProviderFactory' => '\OCA\User_LDAP\LDAPProviderFactory',
'remember_login_cookie_lifetime' => 60,
'session_lifetime' => 60,
'session_keepalive' => false,
'memcache.local' => '\OC\Memcache\APCu',
'memcache.locking' => '\OC\Memcache\Redis',
'filelocking.enabled' => true,
'redis' =>
array (
'host' => '/var/run/redis/redis.sock',
'port' => 0,
'timeout' => 0.0,
),
'appstore.experimental.enabled' => true,
);
~

Are you using external storage, if yes which one: local/smb/sftp/...
no
Are you using encryption: yes/no
no
Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...
LDAP (AD Windows Server 2012 R2)

LDAP configuration (delete this part if not used)

+-------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Configuration | |
+-------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| hasMemberOfFilterSupport | 1 |
| hasPagedResultSupport | |
| homeFolderNamingRule | |
| lastJpegPhotoLookup | 0 |
| ldapAgentName | CN=XXX,CN=Users,DC=ad,DC=XXX,DC=org |
| ldapAgentPassword | *** |
| ldapAttributesForGroupSearch | |
| ldapAttributesForUserSearch | |
| ldapBackupHost | |
| ldapBackupPort | |
| ldapBase | CN=Users,dc=ad,dc=XXXX,dc=org |
| ldapBaseGroups | CN=Users,dc=ad,dc=XXXX,dc=org |
| ldapBaseUsers | CN=Users,dc=ad,dc=XXXX,dc=org |
| ldapCacheTTL | 600 |
| ldapConfigurationActive | 1 |
| ldapDynamicGroupMemberURL | |
| ldapEmailAttribute | mail |
| ldapExperiencedAdmin | 0 |
| ldapExpertUUIDGroupAttr | |
| ldapExpertUUIDUserAttr | |
| ldapExpertUsernameAttr | sAMAccountName |
| ldapGroupDisplayName | cn |
| ldapGroupFilter | (|(XXXXXX
| ldapGroupFilterMode | 0 |
| ldapGroupFilterObjectclass | |
| ldapGroupMemberAssocAttr | uniqueMember |
| ldapHost | ldaps://XXXXX.org |
| ldapIgnoreNamingRules | |
| ldapLoginFilter | (&(&(|(objectclass=user))(|(|(memberof=CN=access_nextcloud,CN=Users,DC=ad,DC=XXXX,DC=org)(primaryGroupID=1195))))(samaccountname=%uid)) |
| ldapLoginFilterAttributes | |
| ldapLoginFilterEmail | 0 |
| ldapLoginFilterMode | 0 |
| ldapLoginFilterUsername | 1 |
| ldapNestedGroups | 0 |
| ldapOverrideMainServer | |
| ldapPagingSize | 500 |
| ldapPort | 636 |
| ldapQuotaAttribute | |
| ldapQuotaDefault | |
| ldapTLS | 0 |
| ldapUserDisplayName | displayName |
| ldapUserDisplayName2 | |
| ldapUserFilter | (&(|(objectclass=user))(|(|(memberof=CN=access_nextcloud,CN=Users,DC=ad,DC=XXXXX,DC=org)(primaryGroupID=1195)))) |
| ldapUserFilterGroups | access_nextcloud |
| ldapUserFilterMode | 0 |
| ldapUserFilterObjectclass | user |
| ldapUuidGroupAttribute | auto |
| ldapUuidUserAttribute | auto |
| turnOffCertCheck | 0 |
| turnOnPasswordChange | 0 |
| useMemberOfToDetectMembership | 1 |
+-------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Client configuration

Browser:
Firefox 50, chromium (stock version Ubuntu 14.04)
Operating system:
Ubuntu 14.04 64bit

Logs

Web server error log

nothing during testing

Nextcloud log (data/nextcloud.log)

nothing during testing

Browser log

[nickvergessen]

Ops, that makes no sense of course

[nickvergessen]

Hmm this is already checked. I guess you can change the avatar and haven't set any. So that's why the notification shows up. But I guess we should adjust the text to mention avatar then.

[chaos-prevails]

I haven't set any other personal information, so also no avatar.
In case of LDAP and no-password-change possibility + e-mail already defined by LDAP server, a text about an avator (or nothing in case this is also already set) would be great!

[jgillich]

And what if I don't want to set a avatar, because frankly I don't care. This "feature" is annoying and useless. And if you think a avatar matters, why not just get it from Gravatar?

[nickvergessen]

Just dismiss the notification once, or don't enable the firstrunwizard app...