Description Florian Best 2016-07-20 12:23:44 CEST

# udm users/user modify --dn uid=foo,ou=users,dc=foo --set owncloudEnabled=1
LDAP Error: Object class violation: attribute 'ownCloudEnabled' not allowed

The mechanism to detect the new object classes for a object doesn't consider a special exception:
Having a User with the following attributes causes the object classes to not being changeable:
objectClass: univentionManageCertificates
userCertificate;binary:: …

Here is a quick working hotfix:
diff --git a/management/univention-directory-manager-modules/modules/univention/admin/handlers/__init__.py b/management/univention-directory-manager-modules/modules/univention/admin/handlers/__init__.py
index d527575..3cde05b 100644
--- a/management/univention-directory-manager-modules/modules/univention/admin/handlers/__init__.py
+++ b/management/univention-directory-manager-modules/modules/univention/admin/handlers/__init__.py
@@ -852,7 +852,7 @@ def _ldap_object_classes(self, ml):
                for attr, val in newattr.items():
                        if not val:
                                continue
-                       if attr.lower() not in allowed:
+                       if attr.lower() not in allowed and re.sub(';binary$', '', attr).lower() not in allowed:
                                univention.debug.debug(univention.debug.ADMIN, univention.debug.WARN, 'The attribute %r is not allowed by any object class.' % (attr,))
                                # ml.append((attr, val, [])) # TODO: Remove the now invalid attribute instead
                                return ml