Univention Bugzilla – Bug 42947
Simplify account deactivation options
Last modified: 2018-03-14 14:38:56 CET
The UMC offers the following options for account deactivation: * None * All disabled * Windows disabled * Kerberos disabled * POSIX disabled * Windows and POSIX disabled * Windows and Kerberos disabled * POSIX and Kerberos disabled I think we should simplify this to two options: * Account activated * Account deactivated Everything else is quite confusing, because: 1. There are interdependencies that are not obvious: → "POSIX disabled" also prevents a login via Samba → "Windows disabled" also prevents a login via Kerberos → "POSIX disabled" still allows a login at KDM and tty see https://docs.software-univention.de/manual-4.1.html#users::management_8 2. "Windows" should probably be named "NTLM" 3. I'm not sure if any of this has been adapated for Samba/AD? Since Samba/AD mostly uses Kerberos, the historical differentiation between "Windows" (meaning NTLM-Auth) and "Kerberos" from Samba/NT times is not applicable anymore
Thanks for that clear bug description. The changes will be done via Bug #39817. *** This bug has been marked as a duplicate of bug 39817 ***
OK, duplicate.
UCS 4.3 has been released: https://docs.software-univention.de/release-notes-4.3-0-en.html https://docs.software-univention.de/release-notes-4.3-0-de.html If this error occurs again, please use "Clone This Bug".