Description Julia Bremer 2022-02-24 10:18:15 CET

The customer who had this problem needs this fixed for UCS 4.4


+++ This bug was initially created as a clone of Bug #54297 +++

The customer has the Cool Solution user-group-sync at work which synchronizes two domains via serializing users & groups from the source system and modifying them via UDM at the destination system.
If a user is moved his uid remains the same, but the DN changes. While updating its groups, the uniqueMember is updated, but the memberUid value is missing afterwards.

The same can be achieved by changing the DN of a user currently in a group:

$ udm groups/group create --position cn=groups,dc=test,dc=de --set name=testgroup --set users=uid=testuser,cn=users,dc=test,dc=de
Object created: cn=testgroup,cn=groups,dc=test,dc=de
$ univention-ldapsearch -LLL cn=testgroup uniqueMember memberUid
dn: cn=testgroup,cn=groups,dc=test,dc=de
memberUid: testuser
uniqueMember: uid=testuser,cn=users,dc=local,dc=test,dc=de
$ udm groups/group modify --dn cn=testgroup,cn=groups,dc=test,dc=de --set users=uid=testuser,cn=Employees,cn=users,dc=test,dc=de
$ univention-ldapsearch -LLL cn=testgroup uniqueMember memberUid
dn: cn=testgroup,cn=groups,dc=test,dc=de
uniqueMember: uid=testuser,cn=Employees,cn=users,dc=local,dc=test,dc=de

Therefore the memberUid should remain untouched instead of being removed.