Bug 51314 – Problems in Groups in Group handling in S4 Connector

Bug 51314 - Problems in Groups in Group handling in S4 Connector


Summary:	Problems in Groups in Group handling in S4 Connector

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	S4 Connector
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2020-05-19 13:22 CEST by Christina Scheinig
Modified:	2020-05-19 15:14 CEST (History)
CC List:	1 user (show)

See Also:	33621
What kind of report is it?:	Bug Report
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2020021321000529
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christina Scheinig

2020-05-19 13:22:01 CEST

A group is not removed as a member of an existing group, when you add a user and a group as group members with the AD Tools and then remove both after a short time with the AD Tools."

ucr variables:
connector/s4/mapping/group/grouptype: true
connector/s4/mapping/group/ignorelist: Console Logon, Windows Hosts,Authenticated Users,World Authority,Everyone,Null Authority,Nobody,Enterprise Domain Controllers
connector/s4/mapping/group/language: en
connector/s4/mapping/group/syncmode: <empty>
connector/s4/mapping/group/table/.*: <empty>
connector/s4/mapping/group/table/Printer-Admins: Print Operators 

Mapping.py is attached in Ticket message #7

How to reproduce: (Ticket message #37)
With RSAT-Tools:
* You have a group and you add a user and a group to this group. 
* Than remove the user and the group.
* The removed group is still a member of the group in openLdap
* After a short time the removed group is now present in the RSAT Tools again.