Bug 33881 - Freshly provisioned school dc overwrites default GPOs
Freshly provisioned school dc overwrites default GPOs
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 3.2
Other Linux
: P5 normal (vote)
: UCS 3.2-0-errata
Assigned To: Arvid Requate
Stefan Gohmann
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-01-09 13:22 CET by Sönke Schwardt-Krummrich
Modified: 2014-01-29 11:18 CET (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2014-01-09 13:22:35 CET
During provisioning of a new school dc the default policies "Default Domain Policy" and "Default Domaincontroller Policy" will be created on the local SYSVOL share. The policy object files always get the same name during provisioning.

Due to the newer modification timestamp of the files on the SYSVOL share, the rsync mechanism copies the new, empty versions to all other school dcs. Therefore any changes done so far to those two policies, may/will be overwritten.
Comment 1 Arvid Requate univentionstaff 2014-01-09 15:55:27 CET
Probably we should fix this in univention-samba4 and do the initial call to sysvol-sync.sh with a new option like "--overwrite-local".
Comment 2 Arvid Requate univentionstaff 2014-01-13 18:54:24 CET
Fixed in errata3.2-0.
Advisory: 2014-01-08-univention-samba4.yaml
Comment 3 Stefan Gohmann univentionstaff 2014-01-22 15:20:24 CET
YAML: OK
Test: OK
Test @School: OK
Comment 4 Moritz Muehlenhoff univentionstaff 2014-01-29 11:18:30 CET
http://errata.univention.de/ucs/3.2/35.html