Bug 50297 - computerobject not shown in the UMC computers module, if certain attributes are missing
Summary: computerobject not shown in the UMC computers module, if certain attributes a...
Status: RESOLVED WONTFIX
Alias: None
Product: UCS
Classification: Unclassified
Component: UMC - Computers
Version: UCS 4.4
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: UMC maintainers
QA Contact: UMC maintainers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-10-01 11:36 CEST by Christina Scheinig
Modified: 2025-02-05 09:28 CET (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.006
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019093021000701, 2020032621000281
Bug group (optional):
Customer ID: 00026
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christina Scheinig univentionstaff 2019-10-01 11:36:33 CEST 
A computeraccount is not shown in the UMC computers module but in the ldap-directory module.

The computeraccount lacks the Kerberos attributes, the corresponding objectClass and univentionServerRole: windows_client

The computeraccount looks like this:

# test, computers, schein.ig
dn: cn=test,cn=computers,dc=schein,dc=ig
macAddress: 00:19:99:6f:11:e6
cn: test
objectClass: top
objectClass: univentionHost
objectClass: univentionObject
objectClass: sambaSamAccount
objectClass: person
objectClass: shadowAccount
objectClass: univentionWindows
objectClass: posixAccount
uidNumber: 2018
sambaAcctFlags: [W          ]
uid: test$
aRecord: 10.200.43.22
loginShell: /bin/false
univentionObjectType: computers/windows
displayName: test
associatedDomain: schein.ig
sn: test
univentionNetworkLink: cn=default,cn=networks,dc=schein,dc=ig
homeDirectory: /dev/null
gidNumber: 1005
sambaPrimaryGroupSID: S-1-5-21-2438365080-1175145288-4246282840-11011
sambaSID: S-1-5-21-2438365080-1175145288-4246282840-1122
description: aaa
----------

The identity filter in  
/usr/share/pyshared/univention/admin/handlers/computers/windows.py
---
def identify(dn, attr, canonical=0):
        return 'univentionHost' in attr.get('objectClass', []) and 'univentionWindows' in attr.get('objectClass', []) and 'windows_domaincontroller' not in attr.get('univentionServerRole', [])
---
should find the computer, but the computer is not shown in the UMC.

Searching via univention-ldapsearch '(&(&(objectClass=univentionHost)(objectClass=univentionWindows))(!(univentionServerRole=windows_domaincontroller)))' this filter finds the computeraccount.
Comment 1 Florian Best univentionstaff 2019-10-01 12:24:44 CEST 
In Bug #49958 we created a diagnosis script, which fixed these objects.
The object comes from a UCS environment < UCS 3.0, right?
Comment 2 Jan-Luca Kiok univentionstaff 2025-02-05 09:28:45 CET 
This issue has been filed against UCS 4.4.

UCS 4.4 is out of maintenance and components may have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer versions, please use "Clone this bug" or reopen this issue. In this case please provide information on how this issue is affecting you.