Bug 48109 – entryUUID in attributes other than person_id seems to be a problem in Apple School Manager

Bug 48109 - entryUUID in attributes other than person_id seems to be a problem in Apple School Manager


Summary:	entryUUID in attributes other than person_id seems to be a problem in Apple S...

Status:	CLOSED FIXED

Product:	UCS@school
Classification:	Unclassified
Component:	Apple School Manager
Version:	UCS@school 4.3
Hardware:	Other Mac OS X 10.1

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Daniel Tröder
QA Contact:	Jürn Brodersen

URL:
Keywords:

Depends on:
Blocks:	47620
	Show dependency tree / graph

Reported:	2018-11-07 10:39 CET by Michel Smidt
Modified:	2018-12-13 10:11 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	4: Will affect most installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.343
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
error message (71.99 KB, image/png) 2018-11-07 10:39 CET, Michel Smidt	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michel Smidt 2018-11-07 10:39:10 CET

Created attachment 9728 [details]
error message

Tested Apple School Manager Connector with anonymization:
asm/attributes/student/anonymize=yes
asm/attributes/staff/anonymize=yes

This leads to an upload issue (screen shot attached).
Assigning the firstname in ASM with the entryUUID from the UCS leads to an error.
As a workaround I fixed this with:
asm/attributes/student/anonymize/first_name="-"
asm/attributes/staff/anonymize/first_name="-"
This is not nice from the usability perspective but seemed to work.

Comment 1 Daniel Tröder

2018-11-07 13:52:47 CET

Anonymizing values can now be set by UCRV using '%attr' values. "attr" must be a LDAP attribute. The defaults when anonymization is on are now:

asm/attributes/*/anonymize/first_name: '%uid'
asm/attributes/*/anonymize/middle_name: no value / empty
asm/attributes/*/anonymize/last_name: 'No Name'
asm/attributes/*/anonymize/email_address: no value / empty
asm/attributes/*/anonymize/sis_username: '%uid'

(* = staff | student)

The default for the "mapping" value (asm/attributes/*/person_id/mapping) is now '%entryUUID'. This does not depend on anonymization and is always used.

[4.3 4da27cb] Bug #48109: add support for setting anonymized values from LDAP attributes

univention-apple-school-manager-connector 1.0.0-16

Uploaded to test-appcenter (4.3/asm=1.0).

Comment 2 Jürn Brodersen

2018-11-08 12:29:21 CET

Works

Comment 3 Daniel Tröder

2018-11-19 17:44:54 CET

App v1.1 has been released: https://www.univention.com/products/univention-app-center/app-catalog/apple-school-manager/