Bug 48648 – [4.3] Add ucsschoolRole to OU-specific groups

Bug 48648 - [4.3] Add ucsschoolRole to OU-specific groups


Summary:	[4.3] Add ucsschoolRole to OU-specific groups

Status:	CLOSED WONTFIX

Product:	UCS@school
Classification:	Unclassified
Component:	LDAP
Version:	UCS@school 4.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Daniel Tröder
QA Contact:	Sönke Schwardt-Krummrich

URL:
Keywords:

Depends on:	48226 48647
Blocks:
	Show dependency tree / graph

Reported:	2019-02-11 17:18 CET by Valentin Heidelberger
Modified:	2023-06-12 15:39 CEST (History)
CC List:	2 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.023
Enterprise Customer affected?:
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Valentin Heidelberger

2019-02-11 17:18:37 CET

Some groups created by UCS@school miss the objectClass ucsschoolGroup. E.g. for school OU "s1":

univention-ldapsearch '(&(cn=*-s1)(objectClass=univentionGroup)(!(objectClass=ucsschoolGroup)))' | grep cn:
cn: admins-s1
cn: schueler-s1
cn: lehrer-s1
cn: mitarbeiter-s1

I propose to add the objectClass ucsschoolGroup to these kinds of group objects.

Comment 1 Florian Best

2019-02-11 20:26:08 CET

I could not reproduce this on my system? Did that happen on a new installation?
If yes, how did you create the school (UMC, CLI, Importer)?

Comment 2 Daniel Tröder

2019-02-12 18:44:08 CET

I cannot reproduce it with the "create_ou" script or the "Schulen" UMC-wizard.

What do you mean with the "Importer" - the "import_group" script, or another?

Comment 4 Daniel Tröder

2019-02-13 17:20:13 CET

The OCs will only be set on the LDAP objects, when required. So they "appear" after running:

# ucr set ucsschool/feature/roles=yes
# /usr/share/ucs-school-import/scripts/migrate_ucsschool_roles --modify --all-objects

Comment 5 Daniel Tröder

2019-02-13 17:25:58 CET

Backport of code from 4.4 required.

Comment 6 Daniel Tröder

2019-02-14 09:56:13 CET

Backporting for the ucsschool_role feature is not consensus.
To be discussed/prioritized later.

@valentin: is there a ticket from the customer?

Comment 7 Valentin Heidelberger

2019-02-14 10:12:01 CET

(In reply to Daniel Tröder from comment #6)
> Backporting for the ucsschool_role feature is not consensus.
> To be discussed/prioritized later.
> 
> @valentin: is there a ticket from the customer?

There is, but just indirectly. It'd have helped me with a listener module I wrote for that customer. Since I already worked around it now a backport is not really necessary.

Comment 8 Daniel Tröder

2019-02-18 12:13:55 CET

No backport to 4.3, as not currently required.