Bug 47008 – S4 Connector: Make global_ignore_subtree configurable via UCR

Bug 47008 - S4 Connector: Make global_ignore_subtree configurable via UCR


Summary:	S4 Connector: Make global_ignore_subtree configurable via UCR

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	S4 Connector
Version:	UCS 4.2
Hardware:	Other Linux

Importance:	P5 enhancement (vote)
Target Milestone:	UCS 4.4-0-errata
Assigned To:	Julia Bremer
QA Contact:	Arvid Requate

URL:
Keywords:

Depends on:	41680
Blocks:
	Show dependency tree / graph

Reported:	2018-05-15 10:30 CEST by Andreas Peichert
Modified:	2019-04-24 13:13 CEST (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2017082821000103, 2018092821000743
Bug group (optional):	External feedback
Max CVSS v3 score:

Attachments
wording.diff (2.39 KB, patch) 2019-04-23 19:32 CEST, Arvid Requate	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Andreas Peichert

2018-05-15 10:30:24 CEST

The S4 Connector mapping file uses 'global_ignore_subtree' to ignore many DN subtrees. Similar to the AD Connector the hard coded list should be extend by UCR for the S4 Connector as well i.e. "connector/s4/mapping/ignoresubtree"

+++ This bug was initially created as a clone of Bug #41680 +++

The AD Connector mapping file uses 'global_ignore_subtree' to ignore a bunch of LDAP subtrees so they do NOT get synchronized. Unfortunately this is a hard coded list and not configurable. In some scenarios this ignore list must be extended so we should make this possible, just as other objects can be ignored via UCR, too (groups, users, containers ...)

Comment 1 Nico Stöckigt

2018-10-15 10:36:37 CEST

There are obvious scenarios in which it seems to be quite handy to be able to ignore subtrees. In a customer environment there is an additional DNS-Zone for which Samba/AD SRV-Records had been created but they should not be replicated due to they will be rejected anyway.

Comment 2 Julia Bremer

2019-04-18 10:21:44 CEST

Successful build
Package: univention-s4-connector
Version: 13.0.2-6A~4.4.0.201904171907
Branch: ucs_4.4-0
Scope: errata4.4-0
User: jbremer
Host: dimma.knut.univention.de
Logfile Path: /var/univention/buildsystem2/logs/ucs_4.4-0-0-errata4.4-0/univention-s4-connector_13.0.2-6A~4.4.0.201904171907.log.bz2

1685388539 Bug #47008: Make global_ignore_subtree configurable via ucr variable connector/s4/mapping/ignoresubtree/*


I replicated the behaviour of connector/ad/mapping/ignoresubtree/ 
to create the ucr variable connector/s4/mapping/ignoresubtree,
to keep the consistency between the two.

Comment 3 Arvid Requate

2019-04-23 19:32:01 CEST

Created attachment 9988 [details]
wording.diff

Verified:
* Works

In comparison with the AD-Connector, the description of the UCS variables is a bit terse. See attached patch suggestion.

Comment 4 Julia Bremer

2019-04-24 09:09:16 CEST

Successful build
Package: univention-s4-connector
Version: 13.0.2-7A~4.4.0.201904240903
Branch: ucs_4.4-0
Scope: errata4.4-0
User: jbremer

a27dc67122 Bug #47008: Yaml
2e8d1395cb Bug #47008: Adjust variable description of connector/s4/mapping/ignoresubtree


I adjusted the variable description and advisory wording according to your suggestions.

Comment 5 Arvid Requate

2019-04-24 11:48:49 CEST

Verified:
* Variable description
* Advisory

Comment 6 Arvid Requate

2019-04-24 13:13:01 CEST

<http://errata.software-univention.de/ucs/4.4/58.html>