Bug 44945 – gapps: allow synchronization of suspended attribute

Bug 44945 - gapps: allow synchronization of suspended attribute


Summary:	gapps: allow synchronization of suspended attribute

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Google Apps for Work
Version:	UCS 4.2
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Daniel Tröder
QA Contact:	Erik Damrose

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2017-07-06 12:11 CEST by Daniel Tröder
Modified:	2017-08-17 06:42 CEST (History)
CC List:	1 user (show)

See Also:	40925
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	4: A User would return the product
User Pain:	0.069
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2017051621000702
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Tröder

2017-07-06 12:11:00 CEST

The "suspended" attribute can currently not be synchronized to the google directory. A customer with an appropriate LDAP schema could synchronize a user attribute using a UCRV-configurable mapping.

Comment 1 Daniel Tröder

2017-07-12 10:07:29 CEST

r80912: allow synchronization of suspended attribute

Package: univention-google-apps
Version: 1.0.1-3A~4.2.0.201707061217
Branch: ucs_4.2-0
Scope: univention-google-apps

To test this run:

ucr set google-apps/attributes/mapping/suspended="%pager" google-apps/attributes/mapping/suspensionReason="ADMIN"

and restart the listener.

Then set the pager attribute to one of '0', '1', 'True', 'False' (case insensitive).

Comment 2 Erik Damrose

2017-07-13 10:54:46 CEST

Looks good after the code review.

Reopen due to a suggestion. I think we could implement the functionality in a more elegant way. Re-using an arbitrary user attribute and having to configure it is not very intuitive - one would have to read the documentaion.

A schema extension with an extended attribute could show a checkbox on the user object 'google apps' tab, along with an explanation what the checkbox does.

Comment 3 Daniel Tröder

2017-07-13 12:49:53 CEST

This bug is to allow the synchronization of an arbitrary LDAP attribute to Googles suspend property. "pager" was just an example to test the functionality.

The bug to create a suspend feature in the product is Bug #40925.

Comment 4 Erik Damrose

2017-07-13 13:33:27 CEST

Thanks for clarifying the use case.

OK: univention-google-apps 1.0.1-3A~4.2.0.201707061217
OK: Package update with existing gapps connection
OK: configure pager as test attribute
OK: Suspend user, reactivate user
Verified

I wrote a small guide how to configure this feature: http://wiki.univention.de/index.php?title=GSuite_Connector

Comment 5 Daniel Tröder

2017-07-14 10:21:45 CEST

The App update has been published. Waiting for the app center team to approve.

I added an updated google admin console screenshot.

Comment 6 Stefan Gohmann

2017-08-17 06:42:17 CEST

The app ss already online.