Bug 47310 – Rejects for cn=Console Logon on updated systems

Bug 47310 - Rejects for cn=Console Logon on updated systems


Summary:	Rejects for cn=Console Logon on updated systems

Status:	REOPENED

Product:	UCS
Classification:	Unclassified
Component:	S4 Connector
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:	46107
Blocks:
	Show dependency tree / graph

Reported:	2018-07-05 13:29 CEST by Arvid Requate
Modified:	2023-02-14 08:24 CET (History)
CC List:	4 users (show)

See Also:	46265
What kind of report is it?:	Bug Report
What type of bug is this?:	1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	1: Nuisance – not a big deal but noticeable
User Pain:	0.017
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2018062921000541, 2022070621000137
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2018-07-05 13:29:00 CEST

Ticket# 2018062921000541 reported a reject for the group
  cn=Console Logon,cn=builtin,$ldap_base

On my updated UCS DC Master that group has not been added to connector/s4/mapping/group/ignorelist, so I guess that joining a new UCS 4.3-1 DC with Samnba/AD would trigger the reject.


We should also research if the group types are ok, because that's the reject is triggerd by an unpermitted group type change ( see https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755692(v=ws.10) ).

Do we need to recommend some step from https://help.univention.com/t/activation-of-the-synchronisation-of-the-grouptype-attribute-with-the-s4-connector/6451 in the advisory too?

+++ This bug was initially created as a clone of Bug #46107 +++

Comment 1 Ingo Steuwer

2021-05-14 15:41:25 CEST

This issue has been filed against UCS 4.3.

UCS 4.3 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.

Comment 2 Christina Scheinig

2022-07-08 09:21:07 CEST

This causes still rejects in UCS: 5.0-2 errata339
This is a reject which is shown in systemdiagnostics and therefore it is potentially a supportticket.