Bug 47204 – [4.2] school-import needs read-only cn=admin connection

Bug 47204 - [4.2] school-import needs read-only cn=admin connection


Summary:	[4.2] school-import needs read-only cn=admin connection

Status:	CLOSED FIXED

Product:	UCS@school
Classification:	Unclassified
Component:	Import scripts
Version:	UCS@school 4.2
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS@school 4.2 v11
Assigned To:	Daniel Tröder
QA Contact:	Jürn Brodersen

URL:
Keywords:

Depends on:	47203
Blocks:
	Show dependency tree / graph

Reported:	2018-06-18 13:17 CEST by Daniel Tröder
Modified:	2018-09-11 11:33 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.046
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Tröder

2018-06-18 13:17:39 CEST

+++ This bug was initially created as a clone of Bug #47203 +++

The UCS@school import should use a read-only cn=admin connection (instead of a machine connection) for the dry-run and wherever a write-connection is not required.

To use a cn=admin connection is important, because otherwise the LDAP ACLs would create a massive slow down.

Comment 1 Daniel Tröder

2018-06-18 16:50:34 CEST

Merged from 4.3 (Bug #47203):

[dtroeder/46837_4.2_checks_in_dry-run] d73b64624 Bug #47204: add read-only LDAP connection support
[dtroeder/46837_4.2_checks_in_dry-run] bf26faad6 Bug #47204: use read-only LDAP connection during dry-runs and in CSV reader

Comment 2 Daniel Tröder

2018-07-31 08:32:49 CEST

Code was merged to 4.2 and built.

[4.2] 1d8aec8c0 Bug #46837 Bug #47204: Merge branch 'dtroeder/46837_4.2_checks_in_dry-run' into 4.2
[4.2] 5f3148805 Bug #46837 Bug #47204: changelog
[4.2] 5dac9f3ca Bug #46837 Bug #47204: advisory

ucs-school-import (15.0.3-64)

Comment 3 Jürn Brodersen

2018-08-07 18:52:00 CEST

Same tests as in bug 47203 -> OK

YAML -> OK

-> Verified

Comment 4 Sönke Schwardt-Krummrich

2018-09-11 11:33:37 CEST

UCS@school 4.2 v11 has been released.

https://docs.software-univention.de/changelog-ucsschool-4.2v11-de.html

If this error occurs again, please clone this bug.