Description Jan-Luca Kiok 2022-01-04 16:33:35 CET

The customer has the Cool Solution user-group-sync at work which synchronizes two domains via serializing users & groups from the source system and modifying them via UDM at the destination system.
If a user is moved his uid remains the same, but the DN changes. While updating its groups, the uniqueMember is updated, but the memberUid value is missing afterwards.

The same can be achieved by changing the DN of a user currently in a group:

$ udm groups/group create --position cn=groups,dc=test,dc=de --set name=testgroup --set users=uid=testuser,cn=users,dc=test,dc=de
Object created: cn=testgroup,cn=groups,dc=test,dc=de
$ univention-ldapsearch -LLL cn=testgroup uniqueMember memberUid
dn: cn=testgroup,cn=groups,dc=test,dc=de
memberUid: testuser
uniqueMember: uid=testuser,cn=users,dc=local,dc=test,dc=de
$ udm groups/group modify --dn cn=testgroup,cn=groups,dc=test,dc=de --set users=uid=testuser,cn=Employees,cn=users,dc=test,dc=de
$ univention-ldapsearch -LLL cn=testgroup uniqueMember memberUid
dn: cn=testgroup,cn=groups,dc=test,dc=de
uniqueMember: uid=testuser,cn=Employees,cn=users,dc=local,dc=test,dc=de

Therefore the memberUid should remain untouched instead of being removed.