Bug 50597 – [O365] univention-office365 App doesn't add LDAP-Indices yet

Bug 50597 - [O365] univention-office365 App doesn't add LDAP-Indices yet


Summary:	[O365] univention-office365 App doesn't add LDAP-Indices yet

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Office 365
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Mail maintainers
QA Contact:	Mail maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-12-04 17:36 CET by Arvid Requate
Modified:	2019-12-16 18:16 CET (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2019-12-04 17:36:26 CET

The univention-office365 App doesn't add LDAP-Indices yet. My attempts failed, because this causes the Joinscript to abort, unless we stop the slapd-Server first and restart it afterwards. We need to discuss if we want this:

if [ -x /usr/share/univention-ldap/ldap_setup_index ]; then                     
»       /usr/share/univention-ldap/ldap_setup_index \                           
»       »       --add-eq univentionOffice365Enabled \                           
»       »       --add-eq univentionOffice365ADConnectionAlias \                 
»       »       --add-pres univentionOffice365ADConnectionAlias || die 
fi

Comment 1 Ingo Steuwer

2019-12-04 21:12:30 CET

in which cases are these attributes included in search filters?

Comment 2 Arvid Requate

2019-12-04 21:40:30 CET

According to my quick search both are used mainly in the method "add_ldap_members_to_azure_group".

There are other occurances in the code but either during migration (where we check that univentionOffice365ADConnectionAlias is not present) or in the filters of the listener modules, which are not used for any actual LDAP searches.

Comment 3 Ingo Steuwer

2019-12-05 08:35:09 CET

(In reply to Arvid Requate from comment #2)
> According to my quick search both are used mainly in the method
> "add_ldap_members_to_azure_group".

For which use case is this method called?

Comment 4 Arvid Requate

2019-12-16 18:16:13 CET

> > According to my quick search both are used mainly in the method
> > "add_ldap_members_to_azure_group".
> 
> For which use case is this method called?

In case a customer has manually activated the UCR variable office365/groups/sync the index would get used in the method "add_ldap_members_to_azure_group" which gets called from the "create_group" function.