Bug 47779 - Connector ignores Group for Computer Accounts
Connector ignores Group for Computer Accounts
Product: UCS
Classification: Unclassified
Component: S4 Connector
UCS 4.3
Other Linux
: P5 normal (vote)
: UCS 4.3-2-errata
Assigned To: Felix Botner
Arvid Requate
Depends on:
Blocks: 47947
  Show dependency treegraph
Reported: 2018-09-11 11:23 CEST by Christian Völker
Modified: 2018-10-10 16:25 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.114
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support: Yes
Ticket number: 2018091021000482
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Christian Völker univentionstaff 2018-09-11 11:23:34 CEST
Steps to reproduce:
tail -f connector-24.log

Create a Group named ie "LinuxGruppe" through Module Groups (yellow)
Create a new computer (ie lxclient) with type "Rechner: Linux", safe (red)
Edit computer "Advanced -> Groups" and add above LinuxGruppe" to the computer (red)

You will get in connector-s4.log:

11.09.2018 11:18:37,261 LDAP        (PROCESS): sync from ucs: [         group] [    modify] cn=linuxgruppe,cn=groups,DC=multi,DC=ucs
11.09.2018 11:18:37,267 LDAP        (WARNING): group_members_sync_from_ucs: failed to identify object type of ucs member, ignore membership: cn=lxclient,cn=computers,dc=multi,dc=ucs

Is this expected behaviour? User claims in previous versions the groups got synced properly.

Tested above on UCS 4.3-1 e218
Comment 1 Felix Botner univentionstaff 2018-09-19 12:28:26 CEST
The identify part in s4connector.s4.group_members_sync_from_ucs ignored ucs_module_others and therefor did not sync membership for computers/linux, computers/ubuntu ... objects.

Added a identify_udm_object to the ucs class (mainly copied from the existing onces). group_members_sync_from_ucs now uses this.

I was tempted to replace the other identify parts in the connector with a call to the new function, but they are all slightly different ...

univention-s4-connector: b071d3387aa86bcc96163a0f6cbd44cbe7a6ae76 9e6de6b1335af564790ca66f5ee20e0bddc3ed18

yaml: 9b3f7e0802cc4d858cf2f7acc43c22f16704d845

added 52_s4connector/108sync_ucs_module_others_groupmembership_ucs_to_ad
Comment 2 Arvid Requate univentionstaff 2018-10-06 18:17:21 CEST
Code review: Ok
Test status in Jenkins: Ok
Advisory: Ok
Comment 3 Arvid Requate univentionstaff 2018-10-10 12:31:38 CEST