Bug 47402 - Register LDAP schema with lib function ucs_registerLDAPExtension to allow easier package updates
Register LDAP schema with lib function ucs_registerLDAPExtension to allow eas...
Status: NEW
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-07-25 17:37 CEST by Erik Damrose
Modified: 2020-12-01 18:41 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.057
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Damrose univentionstaff 2018-07-25 17:37:21 CEST
Updating the LDAP schema in the univention-saml package is inconvenient, because the library function ucs_registerLDAPExtension is not used. Thus, the package has to be updated on the DC Master first, which occured e.g. in #47309.

Changing the schema registration will allow simpler updates in the future.
Comment 1 Erik Damrose univentionstaff 2018-07-25 17:38:14 CEST
when fixing this, the error message in the joinscript 91univention-saml.inst can be removed
Comment 2 Erik Damrose univentionstaff 2020-12-01 18:41:33 CET
Occured again. When bug 52323 added an attribute to the u-saml.schema which was used in 92univention-management-console-web-server.inst, the join of an additional server failed, because the master did not have the correct univention-saml package installed.

The join failed with
RUNNING 92univention-management-console-web-server.inst
...
LDAP Error: Undefined attribute type: assertionLifetime: attribute type undefined