Univention Bugzilla – Bug 34179
sambaHomePath is not set correctly for staff users
Last modified: 2014-08-27 17:01:47 CEST
During user import the import script uses the home share file server that has been configured at the OU object. This setting/the import script does not differentiate between educational users and administrative users. Therefore "staff" users and "teacher und staff" users are unable to use the server side home directory of the administrative DC since sambaHomePath refers to the educational DC.
There is a patch available for samba4 that brings back the old samba3 behaviour (global configuration of the home path by the logon server): https://git.samba.org/samba.git/?p=samba.git;a=blobdiff;f=lib/param/loadparm.c;h=35666c339459168b4ff2673b375fcc588cc72411;hp=6772ada6494b6dc2918a0942e4e40512747da717;hb=158ce93f4f50f3b10bcadef9eadd613c55bb6cae;hpb=48997559a529152e466c8330cb7d8eb19e1907b0
> Therefore "staff" users and "teacher und staff" users are unable to use the > server side home directory of the administrative DC since sambaHomePath > refers to the educational DC. For "teachers and staff" this is only the case if a firewall blocks access between educational and administrative subnet (which should be the case in most environments). This problem cannot be fixed via LDAP attributes since the attributes are not server specific. Maybe a solution via GPOs on the administrative slave is possible. "staff" users are only located on the administrative slave. The user accounts are not replicated to the educational slave which prevents the users from using any share on the educational slave (if auth is required). Since the administrative slave should behave like a plain-UCS-server, the import script and the UCS@school library have been modified and will not set the following samba LDAP attributes anymore: - sambaHomePath - sambaHomeDrive - sambaLogonScript - sambaProfilePath It is still possible to set these values via hook scripts or GPO or ... ucs-school-import (10.0.24-1) unstable; urgency=low The test framework in ucs-test-ucsschool has been changed accordingly. Changelog entry has been added. Manual changes have been comitted.
Changelog: OK Manual: OK Fix: OK
UCS@school 3.2 R2 v2 has been released: http://docs.univention.de/release-notes-ucsschool-3.2R2v2-de.html If this error occurs again, please use "Clone This Bug".