Description Felix Botner 2019-04-29 15:09:49 CEST

We need a way (UCRV) to disbale the creation/link of the default ldapserver policy, to get something like

 if [ "$server_role" = "domaincontroller_master" -o "$server_role" = "domaincontroller_backup" ]; then
        # Create a LDAP server policy so member server use the LDAP servers of
        # dc master and all dc backups.
-       if ! univention-directory-manager policies/ldapserver list "$@" --filter cn=default-settings | egrep -q '^DN'; then
-               univention-directory-manager policies/ldapserver create "$@" \
-                       --position="cn=ldap,cn=policies,$ldap_base" \
-                       --ignore_exists \
-                       --set name=default-settings \
-                       --append requiredObjectClasses=univentionHost \
-                       --set "ldapFilter=(univentionObjectType=computers/memberserver)"
+       #if ! univention-directory-manager policies/ldapserver list "$@" --filter cn=default-settings | egrep -q '^DN'; then
+       #       univention-directory-manager policies/ldapserver create "$@" \
+       #               --position="cn=ldap,cn=policies,$ldap_base" \
+       #               --ignore_exists \
+       #               --set name=default-settings \
+       #               --append requiredObjectClasses=univentionHost \
+       #               --set "ldapFilter=(univentionObjectType=computers/memberserver)"
 
-               univention-directory-manager container/cn modify "$@" \
-                       --dn "cn=computers,$ldap_base" \
-                       --policy-reference "cn=default-settings,cn=ldap,cn=policies,$ldap_base"
-       fi
+       #       univention-directory-manager container/cn modify "$@" \
+       #               --dn "cn=computers,$ldap_base" \
+       #               --policy-reference "cn=default-settings,cn=ldap,cn=policies,$ldap_base"
+       #fi
 
        # empty policy of old entries
-       OLD_ENTRIES="$(univention-directory-manager policies/ldapserver list "$@" --filter name=default-settings | grep ldapServer | cut -f 2 -d ':')"
-       RMSTR=""
-       for ENTRY in $OLD_ENTRIES; do
-               RMSTR="$RMSTR --remove ldapServer=$ENTRY";
-       done
-       univention-directory-manager policies/ldapserver modify "$@" --dn="cn=default-settings,cn=ldap,cn=policies,$ldap_base" $RMSTR
+       #OLD_ENTRIES="$(univention-directory-manager policies/ldapserver list "$@" --filter name=default-settings | grep ldapServer | cut -f 2 -d ':')"
+       #RMSTR=""
+       #for ENTRY in $OLD_ENTRIES; do
+       #       RMSTR="$RMSTR --remove ldapServer=$ENTRY";
+       #done
+       #univention-directory-manager policies/ldapserver modify "$@" --dn="cn=default-settings,cn=ldap,cn=policies,$ldap_base" $RMSTR
 
        # add all DC master and backup
-       MASTERS="$(univention-directory-manager computers/domaincontroller_master list "$@" | grep 'fqdn:' | cut -f2 -d':' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
-       BACKUPS="$(univention-directory-manager computers/domaincontroller_backup list "$@" | grep 'fqdn:' | cut -f2 -d':' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
-       ADDSTR=""
-       for MASTER in $MASTERS; do
-               if [ "$MASTER" != "None" ]; then
-                       ADDSTR="$ADDSTR --append ldapServer=$MASTER";
-               fi
-       done
-       for BACKUP in $BACKUPS; do
-               if [ "$BACKUP" != "None" ]; then
-                       ADDSTR="$ADDSTR --append ldapServer=$BACKUP";
-               fi
-       done
-       univention-directory-manager policies/ldapserver modify "$@" \
-               --dn="cn=default-settings,cn=ldap,cn=policies,$ldap_base" \
-               $ADDSTR
+       #MASTERS="$(univention-directory-manager computers/domaincontroller_master list "$@" | grep 'fqdn:' | cut -f2 -d':' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+       #BACKUPS="$(univention-directory-manager computers/domaincontroller_backup list "$@" | grep 'fqdn:' | cut -f2 -d':' | sed -e 's/^[[:space:]]*//' -e 's/[[:space:]]*$//')"
+       #ADDSTR=""
+       #for MASTER in $MASTERS; do
+       #       if [ "$MASTER" != "None" ]; then
+       #               ADDSTR="$ADDSTR --append ldapServer=$MASTER";
+       #       fi
+       #done
+       #for BACKUP in $BACKUPS; do
+       #       if [ "$BACKUP" != "None" ]; then
+       #               ADDSTR="$ADDSTR --append ldapServer=$BACKUP";
+       #       fi
+       #done
+       #univention-directory-manager policies/ldapserver modify "$@" \
+       #       --dn="cn=default-settings,cn=ldap,cn=policies,$ldap_base" \
+       #       $ADDSTR
 
        # Slaves currently do not support LDAP server policies, let's create a
        # UCR policy from the LDAP server policy.