Description Dmitry Galkin 2014-07-21 12:03:28 CEST

While writing a test for non-UCR policies (Bug #35314), noticed that policies with required or excluded object class are not inherited. For instance in the following structure:

Ldap/base:
  |--- Base Container (with own 'base container policy')
        |--- Intermediate container (with own 'intermediate container policy')
              |--- User 1 (No samba, but with own 'user policy')
              |--- User 2 (With samba, but no own user policy)
              |--- User 3 (No samba and no own user policy)


When intermediate container policy has the {'requiredObjectClasses': ["sambaSamAccount"]} setting, the 'User 3' should have the base container policy winning, since it is not a samba user and thus intermediate container policy should not be applied.

When checking 'User 3' policy via univention-policy-result tool the result is correct (i.e. 'User 3' has base container policy settings): root@backup11:~# univention-policy-result -D uid=Administrator,cn=users,dc=dgalkin,dc=dev -w univention -s uid=umc_test_user_bb5kgngvha,cn=intermediate_test_container,cn=base_test_container,dc=dgalkin,dc=dev

...
univentionPWHistoryLen="5"
univentionPWLength="5"


However, in the UMC same attributes are:
...
univentionPWHistoryLen="4"
univentionPWLength=""

(Those are the attributes inherited from the intermediate container policy)