Bug 53090 – OX join script creates mail domains for all mailPrimaryAddress and mailAlternativeAddress in LDAP

Bug 53090 - OX join script creates mail domains for all mailPrimaryAddress and mailAlternativeAddress in LDAP


Summary:	OX join script creates mail domains for all mailPrimaryAddress and mailAltern...

Status:	NEW

Product:	Z_Internal OX development
Classification:	Unclassified
Component:	Installer
Version:	UCS 4.4 / 7.10.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Mail maintainers
QA Contact:

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2021-04-14 10:52 CEST by Daniel Tröder
Modified:	2022-04-20 10:51 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	bitesize
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Tröder

2021-04-14 10:52:40 CEST

The join script 65univention-ox.inst uses list-missing-mail-domains.py to locate all domains used in mailPrimaryAddress and mailAlternativeAddress entries. It then creates mail/domain objects for all missing domains.

This is not desirable (anymore), as some customers have disabled the syntax check for mailPrimaryAddress and have non-ox-users with not-ucs-hosted email addresses.

The join script will then create mail domains for externally hosted domains and the mail system will not send emails for those anymore to the real servers.

The UDM hook access.py already prevents users from setting not-ucs-hosted email addresses for ox-enabled-users. the ox-app should ignore data of non-ox-users.

Remove the mail domain creation part from the join script (and list-missing-mail-domains.py if not used anymore).