Univention Bugzilla – Bug 34983
OU admins outside cn=admins do not count as full ou admins, cannot create working groups
Last modified: 2016-06-15 11:04:19 CEST
Die Anfrage konnte nicht ausgeführt werden. Fehlernachricht des Servers: Das Kommando ist fehlgeschlagen: Die Gruppe konnte nicht erstellt werden (Zugriff verweigert.).
The school admin have to be underneath of /base/$OU/users/admins/.
FYI: 6.1.3. Anlegen von Benutzerkonten für Schuladministratoren http://docs.univention.de/ucsschool-handbuch-3.2.html#school:importusers:schooladmins
Oh, I did not know that. Now it works. But everything else except working groups were okay (e.g. computer rooms)! This is very counter intuitive (and shows that the ACLs seem to handle those cases differently). Another problem is: Sollte der Schuladministrator auch als Lehrer tätig sein, muss zusätzlich die Gruppe lehrer-OU, also z.B. lehrer-gym17, hinzugefügt werden. This will probably cause some other problems, as teachers are identified by the container they live in. So adding an admin to the teachers group will most probably not list her in any teacher-search widget, etc. REOPENED, not because this is a real bug (as ou admins creation is documented) but because there are general issues with users identified by the container.
Users aren't identified by container anymore in UCS@school 4.1R2.