Bug 43730 - scripts/update-ldap-host-dn: explicitly set SASL mechanism in ldapsearch
scripts/update-ldap-host-dn: explicitly set SASL mechanism in ldapsearch
Product: Z_Univention Corporate Client (UCC)
Classification: Unclassified
Component: initrd
UCC 3.0
Other Linux
: P5 normal
: UCC 3.0-errata
Assigned To: Erik Damrose
Felix Botner
Depends on:
  Show dependency treegraph
Reported: 2017-03-06 15:07 CET by Felix Botner
Modified: 2023-03-25 06:40 CET (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 4: A User would return the product
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Felix Botner univentionstaff 2017-03-06 15:07:03 CET
-               dn="$(ldapsearch -Q -LLL uid=$uid dn | ldapsearch-wrapper | sed -n 's/^dn: \(.*\)/\1/p')"
+               dn="$(ldapsearch -Q -LLL -Y GSSAPI uid=$uid dn | ldapsearch-wrapper | sed -n 's/^dn: \(.*\)/\1/p')"

Better explicitly set SASL mechanism "-Y GSSAPI" in ldapsearch in scripts/update-ldap-host-dn to avoid problems.
Comment 1 Erik Damrose univentionstaff 2017-03-06 16:49:34 CET
This breaks functionality of bug 35411 (detect and adapt move of ldap computer object) with UCS 4.2 -> 3.0-errata
Comment 2 Erik Damrose univentionstaff 2017-04-07 15:56:53 CEST
I made the SASL_MECH configureable via ucc/ldap/sasl_mech, default is GSSAPI. 
r78696 univention-ucc-pam Version: 4.0.0-5.54.201704071552
Comment 3 Erik Damrose univentionstaff 2017-04-10 10:25:18 CEST
whoops, the yaml file is missing:
r78706 yaml
Comment 4 Felix Botner univentionstaff 2017-04-13 19:15:38 CEST
OK - Code
OK - move ucc client with 4.1 serve
OK - move ucc client with 4.2 server