Bug 41716 - replication of a foreign OU doesnt stop in ucs-school when not needed anymore
replication of a foreign OU doesnt stop in ucs-school when not needed anymore
Status: CLOSED WORKSFORME
Product: UCS@school
Classification: Unclassified
Component: General
UCS@school 4.1 R2
Other Linux
: P5 normal (vote)
: UCS@school 4.1 R2 vXXX
Assigned To: Sönke Schwardt-Krummrich
Florian Best
: interim-3
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2016-07-01 14:50 CEST by Daniel Tröder
Modified: 2016-07-11 15:05 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Tröder univentionstaff 2016-07-01 14:50:14 CEST
Once the replication of a foreign OU to a DC slave starts, because a ou-overlapping user has been created, it doesn't stop even when there are no ou-overlapping users anymore.

Reproduce:

1. create user in schoolA
2. add schoolB to users schools attribute
3. remove schoolB from user
4. create another user in schoolA
5. *,cn=groups,ou=schoolA,$ldap_base is still updated in schoolBs LDAP although no user from schoolA is enlisted in schoolB anymore
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2016-07-04 09:49:08 CEST
(In reply to Daniel Tröder from comment #0)
> Once the replication of a foreign OU to a DC slave starts, because a
> ou-overlapping user has been created, it doesn't stop even when there are no
> ou-overlapping users anymore.

There is no "start". The objects ^(cn=[^,]+,)?cn=groups,ou=[^,]+,$ldap_base are always replicated to all school servers by design. So the replication won't ignore these objects if the "last" "forgein" OU user has been removed.
Comment 2 Florian Best univentionstaff 2016-07-11 15:05:13 CEST
Yes.