Bug 43730 – scripts/update-ldap-host-dn: explicitly set SASL mechanism in ldapsearch

Bug 43730 - scripts/update-ldap-host-dn: explicitly set SASL mechanism in ldapsearch


Summary:	scripts/update-ldap-host-dn: explicitly set SASL mechanism in ldapsearch

Status:	CLOSED FIXED

Product:	Z_Univention Corporate Client (UCC)
Classification:	Unclassified
Component:	initrd
Version:	UCC 3.0
Hardware:	Other Linux

Importance:	P5 normal
Target Milestone:	UCC 3.0-errata
Assigned To:	Erik Damrose
QA Contact:	Felix Botner

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2017-03-06 15:07 CET by Felix Botner
Modified:	2023-03-25 06:40 CET (History)
CC List:	1 user (show)

See Also:	43732
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.069
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Felix Botner

2017-03-06 15:07:03 CET

-               dn="$(ldapsearch -Q -LLL uid=$uid dn | ldapsearch-wrapper | sed -n 's/^dn: \(.*\)/\1/p')"
+               dn="$(ldapsearch -Q -LLL -Y GSSAPI uid=$uid dn | ldapsearch-wrapper | sed -n 's/^dn: \(.*\)/\1/p')"

Better explicitly set SASL mechanism "-Y GSSAPI" in ldapsearch in scripts/update-ldap-host-dn to avoid problems.

Comment 1 Erik Damrose

2017-03-06 16:49:34 CET

This breaks functionality of bug 35411 (detect and adapt move of ldap computer object) with UCS 4.2 -> 3.0-errata

Comment 2 Erik Damrose

2017-04-07 15:56:53 CEST

I made the SASL_MECH configureable via ucc/ldap/sasl_mech, default is GSSAPI. 
r78696 univention-ucc-pam Version: 4.0.0-5.54.201704071552

Comment 3 Erik Damrose

2017-04-10 10:25:18 CEST

whoops, the yaml file is missing:
r78706 yaml

Comment 4 Felix Botner

2017-04-13 19:15:38 CEST

OK - YAML
OK - Code
OK - move ucc client with 4.1 serve
OK - move ucc client with 4.2 server