Univention Bugzilla – Bug 41210
Document ou-overlapping user accounts
Last modified: 2023-06-12 15:39:42 CEST
There should be a new chapter documenting the pros and cons of ou-overlapping user accounts. There a some topic that have to be mentioned explicitly: 1) handling of sambaHomePath → there will be one static default in UCS@school → if the customer wants e.g. a per OU-specific home directory, they have to do manual steps: e.g. create an import hook, setting school-specific DNS entries via S4 connector and so on To be continued
It has to be documented how to create ou-overlapping user accounts a) automatically (via new import tool) b) manually (set ExtAttr to r/w and add new OU and groupmemberships to user)
I have documented what I know of this in r70795. Documantation regarding sambaHomePath is missing.
(In reply to Daniel Tröder from comment #2) > I have documented what I know of this in r70795. Well, I don't think we should recommend this unofficial way to add users to multiple schools because this e.g. doesn't add the user to the school groups (but we currently have also no official way via UMC).
In conjunction with bug 41396 there are 3 scenarios for sambaHomePath: 1) sambaHomePath is set by the import scripts and not altered manually: → sambaHomePath refers always to the school server of the "primary" school → Cons: material distrbution won't work (depending on referred server); exam mode is also affected; traffic between schools → Pros: only one real home directory on all clients within that domain 2) sambaHomePath is set by the import scripts to a hardcoded server (configured via UCR; one central file server for all users): → sambaHomePath refers always to the hardcoded school server → Cons: material distrbution won't work (depending on referred server); exam mode is also affected; traffic between schools and central server location → Pros: only one real home directory on all clients within that domain 3) sambaHomePath is set by the import scripts to a hardcoded server alias (configured via UCR; as described in bug 41396): → sambaHomePath refers always to the school server alias → each DNS server returns the IP address of the local school server → Cons: one home directory per school; (small) setup work required on each school (→ some UCR variables) → Pros: exam mode and material distribution will work (within in that school); no network traffic to other schools/sites
Added text to the WIP import-tool-documentation (import-doku.odt document).
Typo: + Schulübergreifenden Benutzerkonten können nur mit Importskripten verwaltet werden. ^ Außerdem würde ich vorschlagen s/mit/durch die ...e/ (oder mithilfe von)
(In reply to Florian Best from comment #6) > Typo: > > + Schulübergreifenden Benutzerkonten können nur mit Importskripten > verwaltet werden. > ^ > > Außerdem würde ich vorschlagen s/mit/durch die ...e/ (oder mithilfe von) Bitte alles was du siehst, direkt im OX-Doc markieren/kommentieren.
Solved as part of Bug #41739.