Univention Bugzilla – Bug 46725
(4.3) GPOs not applied to OU-spanning users
Last modified: 2018-06-04 15:27:43 CEST
+++ This bug was initially created as a clone of Bug #45992 +++ A teacher logged in at his default school, gets all his GPOs applied. If he logs in at an other school ou, the GPOs could not applied, because the school slave is not allowed to read the linked GPOs. _____________________________________________________________________________ samba-tool gpo listcontainers {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} DN: OU=a261,DC=edu,DC=univention,DC=test DN: OU=a473,DC=edu,DC=univention,DC=test DN: OU=a216,DC=edu,DC=univention,DC=test DN: OU=a262,DC=edu,DC=univention,DC=test DN: OU=a263,DC=edu,DC=univention,DC=test DN: OU=a915,DC=edu,DC=univention,DC=test DN: OU=a371,DC=edu,DC=univention,DC=test DN: OU=a110,DC=edu,DC=univention,DC=test DN: OU=a474,DC=edu,DC=univention,DC=test DN: OU=a109,DC=edu,DC=univention,DC=test DN: OU=a217,DC=edu,DC=univention,DC=test DN: OU=a260,DC=edu,DC=univention,DC=test DN: OU=a264,DC=edu,DC=univention,DC=test DN: OU=a267,DC=edu,DC=univention,DC=test DN: OU=a372,DC=edu,DC=univention,DC=test root@e262-sl01:~# samba-tool gpo listcontainers {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} DN: OU=a262,DC=edu,DC=univention,DC=test root@e261-sl01:/home/e262/lehrer/max.muste/windows-profiles# samba-tool gpo listcontainers {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93} DN: OU=a261,DC=edu,DC=univention,DC=test _____________________________________________________________________________ dn: uid=max.muste,cn=lehrer,cn=users,ou=a262,dc=edu,dc=univention,dc=test _______________________________________________________________________________ UCS-Version version/erratalevel: 256 version/patchlevel: 3 version/releasename: Lesum version/version: 4.2 appcenter/apps/ucsschool/version: 4.2 v6
[4.3 36c32064] Bug #46725: Allow read access to GPO list for all DC-Slaves [4.3 7beb42aa] Bug #46725: YAML
Please also implement a test script.
(In reply to Sönke Schwardt-Krummrich from comment #2) > Please also implement a test script. [4.3 265dde7c] Bug #46725: test gpo link replication
Updated ucs-test-ucsschool to make the new test script compatible with UCS@school master systems without installed S4: 5e39487b Bug #46725: add changelog entry 1b429a5f Bug #46725: improved test script OK: code change OK: functional change OK: tests OK: changelog entry OK: advisory
UCS@school 4.3 v3 has been released. https://docs.software-univention.de/changelog-ucsschool-4.3v3-de.html If this error occurs again, please clone this bug.