Bug 42618 - AD Connector: configure sync_mode on attribute level
AD Connector: configure sync_mode on attribute level
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: AD Connector
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.1-4-errata
Assigned To: Arvid Requate
Stefan Gohmann
:
Depends on:
Blocks: 42524 43229
  Show dependency treegraph
 
Reported: 2016-10-10 14:25 CEST by Michael Grandjean
Modified: 2017-02-01 12:07 CET (History)
7 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2013112121005836
Bug group (optional): External feedback
Max CVSS v3 score:
oyen: Patch_Available+


Attachments
Implement per Attribute `sync_mode`. (3.46 KB, patch)
2017-01-11 14:49 CET, Lukas Oyen
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2016-10-10 14:25:18 CEST
The S4 Connector can handle the sync_mode (read, write, sync, none) for every attribute independently. The AD Connector can only handle the sync_mode on an object level (users, groups, OU, container, computers). 

It would be very helpful if the AD Connector could be extended to the same feature set as the S4 Connector, so something like this would be possible:

Global user object setting:
> ucr set connector/ad/mapping/user/syncmode='sync'

Differing attribute settings:
> [...]
> 'pager': univention.connector.attribute (
>                 sync_mode='write'
>                 ucs_attribute='pagerTelephoneNumber',
>                 ldap_attribute='pager',
>                 con_attribute='pager',
>                 con_other_attribute='otherPager',
>         ),
> 'displayName': univention.connector.attribute (
>                 sync_mode='read'
>                 ucs_attribute='displayName',
>                 ldap_attribute='displayName',
>                 con_attribute='displayName',
>        ),
> [...]
Comment 1 Lukas Oyen univentionstaff 2017-01-11 14:49:17 CET
Created attachment 8347 [details]
Implement per Attribute `sync_mode`.

The attached patch adds the per attribute `sync_mode`.

All ad-connector tests running on a UCS 4.1-4 master connected to a Windows Server 2012 in sync mode are passing.
Comment 2 Arvid Requate univentionstaff 2017-01-25 19:33:00 CET
I fixed this along with Bug #43216.
Advisory: univention-ad-connector.yaml
Comment 3 Lukas Oyen univentionstaff 2017-01-26 13:21:19 CET
This was not merged to 4.2 but Felix change in r76088 depends on in.
Comment 4 Arvid Requate univentionstaff 2017-01-30 18:05:34 CET
> This was not merged to 4.2 but Felix change in r76088 depends on in.

It's merged now.
Comment 5 Stefan Gohmann univentionstaff 2017-01-31 16:50:48 CET
Jenkins tests: OK

Changelog: OK, it is part of Bug #43216

UCS 4.2 merge: OK

Code review: OK

Tests: OK
Comment 6 Janek Walkenhorst univentionstaff 2017-02-01 12:07:18 CET
<http://errata.software-univention.de/ucs/4.1/386.html>