Bug 46725 - (4.3) GPOs not applied to OU-spanning users
(4.3) GPOs not applied to OU-spanning users
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: LDAP
UCS@school 4.3
Other Linux
: P5 normal (vote)
: UCS@school 4.3 v3
Assigned To: Jürn Brodersen
Sönke Schwardt-Krummrich
:
Depends on: 45992
Blocks: 46924
  Show dependency treegraph
 
Reported: 2018-03-22 10:17 CET by Jürn Brodersen
Modified: 2018-06-04 15:27 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.171
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2017121321000294
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jürn Brodersen univentionstaff 2018-03-22 10:17:25 CET
+++ This bug was initially created as a clone of Bug #45992 +++

A teacher logged in at his default school, gets all his GPOs applied.
If he logs in at an other school ou, the GPOs could not applied, because the school slave is not allowed to read the linked GPOs.
_____________________________________________________________________________
samba-tool gpo listcontainers  {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
    DN: OU=a261,DC=edu,DC=univention,DC=test
    DN: OU=a473,DC=edu,DC=univention,DC=test
    DN: OU=a216,DC=edu,DC=univention,DC=test
    DN: OU=a262,DC=edu,DC=univention,DC=test
    DN: OU=a263,DC=edu,DC=univention,DC=test
    DN: OU=a915,DC=edu,DC=univention,DC=test
    DN: OU=a371,DC=edu,DC=univention,DC=test
    DN: OU=a110,DC=edu,DC=univention,DC=test
    DN: OU=a474,DC=edu,DC=univention,DC=test
    DN: OU=a109,DC=edu,DC=univention,DC=test
    DN: OU=a217,DC=edu,DC=univention,DC=test
    DN: OU=a260,DC=edu,DC=univention,DC=test
    DN: OU=a264,DC=edu,DC=univention,DC=test
    DN: OU=a267,DC=edu,DC=univention,DC=test
    DN: OU=a372,DC=edu,DC=univention,DC=test

root@e262-sl01:~# samba-tool gpo listcontainers  {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
    DN: OU=a262,DC=edu,DC=univention,DC=test

root@e261-sl01:/home/e262/lehrer/max.muste/windows-profiles# samba-tool gpo listcontainers  {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
Container(s) using GPO {9CC57F64-AA1A-4AEB-BA59-34C1D903BB93}
    DN: OU=a261,DC=edu,DC=univention,DC=test
_____________________________________________________________________________

dn: uid=max.muste,cn=lehrer,cn=users,ou=a262,dc=edu,dc=univention,dc=test
_______________________________________________________________________________
UCS-Version
version/erratalevel: 256
version/patchlevel: 3
version/releasename: Lesum
version/version: 4.2
appcenter/apps/ucsschool/version: 4.2 v6
Comment 1 Jürn Brodersen univentionstaff 2018-03-22 10:44:25 CET
[4.3 36c32064] Bug #46725: Allow read access to GPO list for all DC-Slaves
[4.3 7beb42aa] Bug #46725: YAML
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2018-03-23 09:58:13 CET
Please also implement a test script.
Comment 3 Jürn Brodersen univentionstaff 2018-03-27 11:19:14 CEST
(In reply to Sönke Schwardt-Krummrich from comment #2)
> Please also implement a test script.

[4.3 265dde7c] Bug #46725: test gpo link replication
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2018-04-26 16:12:47 CEST
Updated ucs-test-ucsschool to make the new test script compatible with UCS@school master systems without installed S4:
5e39487b Bug #46725: add changelog entry
1b429a5f Bug #46725: improved test script

OK: code change
OK: functional change
OK: tests
OK: changelog entry
OK: advisory
Comment 5 Sönke Schwardt-Krummrich univentionstaff 2018-05-02 17:59:04 CEST
UCS@school 4.3 v3 has been released.

https://docs.software-univention.de/changelog-ucsschool-4.3v3-de.html

If this error occurs again, please clone this bug.