Univention Bugzilla – Bug 31229
schoolexam-master should call ldap-group-to-file after group membership changes.
Last modified: 2013-06-07 21:40:14 CEST
Whenever schoolexam-master changes group memberships, it should run univention-pam/ldap-group-to-file.py afterwards. We should implement this in a way, that this is performed only once e.g. per exam-start and not for each and every membership change separately.
This should be called on master and slave after exam replication is complete.
I think in multi server environments there is no need to call ldap-group-to-file.py on the DC master after starting the exam mode. Calling this script on the DC slave (after replication is complete) should be sufficient. In a single server environment the group cache has to be updated, to provide valid group memberships. The python backend of ucs-school-umc-exam now updates the group cache after exam user replication is complete (and enabled via UCR). This should also work if "exam server" == "dc master". An exit condition has been added to the replication check. After 5 minutes the replication check stops and the exam creation continues. No special changelog entry necessary (intermediate version). ucs-school-umc-exam (1.0.3-1) unstable; urgency=low # grep nss /var/log/univention/management-console-module-schoolexam.log 23.05.13 11:36:36.020 MODULE ( INFO ) : Updating local nss group cache... 23.05.13 11:36:36.970 MODULE ( INFO ) : Update of local nss group cache finished successfully.
Verified: * code checks related UCR variables and then executes the script. * Waiting for user repliaction now has a 5min timeout with a useful error message.
UCS@school 3.1 R2 has been released: http://download.univention.de/doc/release-notes-ucsschool-3.1-rev2.pdf If this error occurs again, please use "Clone This Bug".