Bug 50642 – Replicate cn=IP Security,CN=System from Master Samba/AD to School Slave via OpenLDAP

Bug 50642 - Replicate cn=IP Security,CN=System from Master Samba/AD to School Slave via OpenLDAP


Summary:	Replicate cn=IP Security,CN=System from Master Samba/AD to School Slave via O...

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	S4 Connector
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:	49838
Blocks:	50626 50641
	Show dependency tree / graph

Reported:	2019-12-16 14:48 CET by Florian Best
Modified:	2019-12-16 14:48 CET (History)
CC List:	8 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:	0.171
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Florian Best

2019-12-16 14:48:08 CET

We should replicate the container CN=IP Security,CN=System.
Otherwise the default MS GP IP security are not syncronized between UCS and Samba 4.

It's currently ignored in the global_ignore_subtree list.

Patch:
diff --git services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
index ff2d20f244..8c1c890315 100644
--- services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
+++ services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
@@ -64,7 +64,6 @@ global_ignore_subtree = [
        'CN=Server,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=ComPartitionSets,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=ComPartitions,CN=System,@%@connector/s4/ldap/base@%@',
-       'CN=IP Security,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=DFSR-GlobalSettings,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=DomainUpdates,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=Password Settings Container,CN=System,@%@connector/s4/ldap/base@%@',


+++ This bug was initially created as a clone of Bug #49838 +++