Bug 35889 - Radius app for UCS 4.0
Radius app for UCS 4.0
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Radius
UCS 4.0
Other Linux
: P5 normal (vote)
: UCS 4.0
Assigned To: Arvid Requate
Drees Dormann
: interim-3
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-09-11 09:16 CEST by Stefan Gohmann
Modified: 2014-11-26 06:55 CET (History)
0 users

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2014-09-11 09:16:27 CEST
Radius app should be available in the App Center for UCS 4.0.
Comment 1 Arvid Requate univentionstaff 2014-10-28 20:25:59 CET
univention-radius has been copied to and adjusted for UCS 4.0.
It has been imported and built in the ucs_4.0-0 main scope and the resulting binary packages have been copied into the 4.0/maintained/component/radius branch of the appcenter.test repositories. Cannot cann update_mirror.sh currently, so the ultimate installation test via appcenter is TBD. Closing for QA.
Comment 2 Arvid Requate univentionstaff 2014-10-29 14:16:57 CET
Ok, installation and functional test is ok too:

## Network access neither allowed for user nor group 
root@master50:~# univention-radius-check-access --username=user1
DENY 'uid=user1,cn=users,dc=ar40i1,dc=qa'
'uid=user1,cn=users,dc=ar40i1,dc=qa'
-> DENY 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'
-> 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'

Thus access for user is DENIED.

## Network access not allowed for user but for group 
root@master50:~# univention-radius-check-access --username=user1
DENY 'uid=user1,cn=users,dc=ar40i1,dc=qa'
'uid=user1,cn=users,dc=ar40i1,dc=qa'
-> ALLOW 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'
-> 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'

Thus access for user is ALLOWED.

## Network access not allowed for user and group 
root@master50:~# univention-radius-check-access --username=user1
ALLOW 'uid=user1,cn=users,dc=ar40i1,dc=qa'
'uid=user1,cn=users,dc=ar40i1,dc=qa'
-> ALLOW 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'
-> 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'

Thus access for user is ALLOWED.

## Network access allowed for user but not for group 
root@master50:~# univention-radius-check-access --username=user1
ALLOW 'uid=user1,cn=users,dc=ar40i1,dc=qa'
'uid=user1,cn=users,dc=ar40i1,dc=qa'
-> DENY 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'
-> 'cn=Domain Users,cn=groups,dc=ar40i1,dc=qa'

Thus access for user is ALLOWED.
Comment 3 Drees Dormann univentionstaff 2014-11-04 16:40:03 CET
install OK

working OK
Comment 4 Stefan Gohmann univentionstaff 2014-11-26 06:55:46 CET
UCS 4.0-0 has been released:
 http://docs.univention.de/release-notes-4.0-0-en.html
 http://docs.univention.de/release-notes-4.0-0-de.html

If this error occurs again, please use "Clone This Bug".