Bug 50434 – Rejects in french AD member mode

Bug 50434 - Rejects in french AD member mode


Summary:	Rejects in french AD member mode

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	AD Connector
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-10-30 10:19 CET by Florian Best
Modified:	2020-06-30 16:28 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Florian Best

2019-10-30 10:19:52 CET

AD rejected
1:    AD DN: CN=Administrateurs de l’entreprise,CN=Users,DC=autotest233win,DC=local
2:    AD DN: CN=Contrôleurs de domaine d’entreprise en lecture seule,CN=Users,DC=autotest233win,DC=local

https://jenkins.knut.univention.de:8181/job/UCS-4.4/job/UCS-4.4-2/job/ADConnectorMultiEnv/6/Version=w2k12r2-france/testReport/00_checks/41_ad_connector_rejects/admember233/

Comment 1 Julia Bremer

2020-02-24 18:54:58 CET

s4_connector Error Message is:

»   »   "A group name must start and end with a letter, number or underscore. In between additionally spaces, dashes "
»   »   "and dots are allowed."


Both group names exceed the max_length in ./management/univention-directory-manager-modules/modules/univention/admin/syntax.py

»   min_length = 1
»   max_length = 32                          ###<----
»   regex = re.compile(r"(?u)^\w([\w -.’]*\w)?$")
»   error_message = _(
»   »   "A group name must start and end with a letter, number or underscore. In between additionally spaces, dashes "
»   »   "and dots are allowed."
»   )

len("Administrateurs de l’entreprise") = 33
len("Contrôleurs de domaine d’entreprise en lecture seule") = 55

Comment 2 Felix Botner

2020-06-30 16:28:39 CEST

as a workaround i added 

 ucr set connector/ad/mapping/group/ignorelist="$(ucr get connector/ad/mapping/group/ignorelist),Contrôleurs de domaine d’entreprise en lecture seule,Administrateurs de l’entreprise"

to scenarios/ad-connector/autotest-233-adsync-w2k12r2-france.cfg to "fix" the 00_checks.41_ad_connector_rejects.admember233 ucs-test