Bug 31966 - add UCR policy to school ou with UCRV proxy/pac="http://SCHOOL_DC_IP/proxy.pac" when creating a ucc client
add UCR policy to school ou with UCRV proxy/pac="http://SCHOOL_DC_IP/proxy.pa...
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: Import scripts
unspecified
Other Linux
: P5 normal (vote)
: UCS@school 3.1 R2 Errata
Assigned To: Sönke Schwardt-Krummrich
Felix Botner
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-07-12 11:15 CEST by Felix Botner
Modified: 2013-08-15 09:45 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Felix Botner univentionstaff 2013-07-12 11:15:48 CEST
We need a way to define the proxy server for ucc clients. Maybe we can add a UCR policy to the school ou with

 proxy/pac="http://SCHOOL_DC_IP/proxy.pac"

when creating ou's or ucc clients.
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2013-07-17 17:20:26 CEST
The UCR variable ucc/proxy/server will be set instead of ucc/proxy/autoconfig/url, because otherwise KDE network environment (→ dolphin) is broken.

The UCR policy will set the following UCR variable:
ucc/proxy/server="http://${hostname}.${domainname}:${squid_httpport}"

ucs-school-ucc-integration (1.0.2-1) unstable; urgency=low
Comment 2 Felix Botner univentionstaff 2013-07-22 12:58:23 CEST
please use the UCRV ucc/proxy/http for the proxy settings (see https://forge.univention.org/bugzilla/show_bug.cgi?id=31905#c1)
Comment 3 Sönke Schwardt-Krummrich univentionstaff 2013-07-23 09:10:14 CEST
A changelog entry has been added in changelog-ucsschool-3.1R3.tex (→ changelog file has to be renamed).

(In reply to Felix Botner from comment #2)
> please use the UCRV ucc/proxy/http for the proxy settings
→ changed ucc/proxy/server to ucc/proxy/http

ucs-school-ucc-integration_1.0.4-1.6.201307230903_all.deb
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2013-07-23 12:49:33 CEST
Fixed problem with long DNs:
ucs-school-ucc-integration_1.0.4-2.7.201307231247_all.deb
Comment 5 Felix Botner univentionstaff 2013-07-23 14:36:37 CEST
> (In reply to Felix Botner from comment #2)
> > please use the UCRV ucc/proxy/http for the proxy settings
> → changed ucc/proxy/server to ucc/proxy/http
> 
> ucs-school-ucc-integration_1.0.4-1.6.201307230903_all.deb

OK

> Fixed problem with long DNs:

OK

> A changelog entry has been add

OK
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2013-07-25 17:21:34 CEST
On a single server add_ucc_settings_to_ou is called via the join script too early (the OU does not exist at that point in time), which leads to missing values at the OU UCR policy.
Comment 7 Sönke Schwardt-Krummrich univentionstaff 2013-07-25 18:08:06 CEST
Changes including missing documentation part:

The joinscript is not called in postinst anymore. Thus no change on a dc slave.
On a dc master the join script may be called manually or by the installation wizard. The join script then calls 
/usr/share/ucs-school-ucc-integration/add_ucc_settings_to_ou
which does the actual work (creating UCR policy, attaching policy to OU).
On a single server (master) the create_ou.post hook script
usr/share/ucs-school-import/hooks/ou_create_post.d/50update_ucr_policy
checks, if the system is configured as single server. If this is the case, add_ucc_settings_to_ou is called for every new OU created by the create_ou script.

During installation the UCR variable ucsschool/import/generate/policy/ucc/settings
will be set to "yes". If a "false" value is found in that variable, no policy is created/attached automatically. The variable has to be set on master/slaves before update/installation of UCS@school.

ucs-school-ucc-integration (1.0.5-1) unstable; urgency=low
Comment 8 Felix Botner univentionstaff 2013-07-26 11:14:22 CEST
single-server:

  OK - ucc policy for first ou
  OK - other ou's

multi-server:

  OK - policy created via dc slave join
Comment 9 Sönke Schwardt-Krummrich univentionstaff 2013-08-15 09:45:27 CEST
UCS@school 3.1 R2-1 has been released:
http://download.univention.de/doc/release-notes-ucsschool-3.1-rev2-1.pdf

If this error occurs again, please use "Clone This Bug".