Bug 40763 – Mark krbtgt account as hidden

Bug 40763 - Mark krbtgt account as hidden


Summary:	Mark krbtgt account as hidden

Status:	REOPENED

Product:	UCS
Classification:	Unclassified
Component:	Kerberos
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2016-02-24 11:28 CET by Arvid Requate
Modified:	2020-07-06 09:21 CEST (History)
CC List:	4 users (show)

See Also:	40858 24457
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2016092921000254, 2016022321000429
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2016-02-24 11:28:24 CET

Ticket#2016022321000429 shows a case where an admin accidentally deleted the "krbtgt" account via UMC. Maybe we should hide it from the normal view:

udm users/user modify --dn uid=krbtgt,cn=users,$ldap_base \
                      --set objectFlag=hidden

Comment 1 Florian Best

2016-02-24 11:36:39 CET

The beneath command could probably be executed in the joinscript base/univention-heimdal/11univention-heimdal-init.inst.

Comment 2 Felix Botner

2016-09-29 15:52:58 CEST

Ticket #2016092921000254

Comment 3 Ingo Steuwer

2020-07-03 20:54:59 CEST

This issue has been filed against UCS 4.2.

UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.

Comment 4 Philipp Hahn

2020-07-05 08:09:18 CEST

Please try to explain that to participants of our Technical Training, why we hide "dns-$HOSTNAME" and "sso-$HOSTNAME", but not "krbtgt".

TT 2020-07-01/02
TT 2020-06-25/26
TT 2020-05-20/21
…
TT 2005-xx.xx