Univention Bugzilla – Bug 32393
Listener module for replication of LDAP ACL extensions
Last modified: 2013-11-19 06:43:52 CET
A listener module for the replication of LDAP ACL extensions should be implemented, * running on Master an Backup * filtering for a specific objectClass representing UCS LDAP ACL extensions * writing the value of an LDAP attribute "univentionLDAPACL" * to a file specified by another LDAP attribute "univentionLDAPACLFilename" * It must not overwrite newer versions by older versions. * It registers the new UCR template subfile (and commits the file). * Saves the objectDN as a reference to a local .info file next to the ACL file. These UCS LDAP ACL extension objects are created by metapackage joinscripts using a univention-lib function. Additional tasks for the listener specific for the master: * send a reload signal to the slapd (Bug #31801) * signal schema availability (to the univention-lib function) by writing the attribute "univentionLDAPSchemaActive" to the LDAP object.
Additional requirement: * Either the listener considers the specified UCS version range and removes/unregisters the ACL extension in case the local UCS version does not match any longer. * Or the template subfile is somehow made aware of the version range and only outputs the additional rules in case the local UCS version matches.
The module has been implemented under the name settings_ldapacl.py The ACL data is expected to be gzip-compressed and base64 encoded. The listener considers the specified UCS version range and removes/unregisters the ACL extension in case the local UCS version does not match. Changelog adjusted.
The listener module has now been renamed to "ldap_extension" and merged with the listener of Bug #31801. Compression was changed to bzip2 due to limitations of the python zlib module.
Changelog: OK The QA will be done via Bug #31801.
UCS 3.2 has been released: http://docs.univention.de/release-notes-3.2-en.html http://docs.univention.de/release-notes-3.2-de.html If this error occurs again, please use "Clone This Bug".