Description Arvid Requate 2022-05-05 10:43:36 CEST

While starting to dig into Bug #52758 I found that the LDB module univention_samaccountname_ldap_check is not activated after setup of single school:

```
root@primary20:~# univention-app info
UCS: 5.0-1 errata296
Installed: cups=2.2.1 samba4=4.13 squid=3.5 ucsschool=5.0 v1 4.4/ucsschool-veyon-proxy=1.1
Upgradable: 

root@primary20:~# univention-check-join-status 
Joined successfully

root@primary20:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b '@MODULES' -s base
# record 1
dn: @MODULES
@LIST: samba_dsdb
distinguishedName: @MODULES

# returned 1 records
# 1 entries
# 0 referrals

root@primary20:~# dpkg -l libunivention-ldb-modules
Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schlecht)
||/ Name                      Version                     Architektur  Beschreibung
+++-=========================-===========================-============-=================================
ii  libunivention-ldb-modules 8.0.0-6A~5.0.0.202202031157 amd64        Univention LDB modules

root@primary20:~# ucr search samba4/ldb/sam/module/prepend
samba4/ldb/sam/module/prepend: univention_samaccountname_ldap_check
```

Expected behavior:

```
root@primary20:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b '@MODULES' -s base
+ ldbsearch -H /var/lib/samba/private/sam.ldb -b @MODULES -s base
# record 1
dn: @MODULES
@LIST: univention_samaccountname_ldap_check,samba_dsdb
distinguishedName: @MODULES
```

We should discuss if my expectations are simply outdated and the behavior is intended or if this is a regression in UCS@school. From my PoC it's a bug, because re-running the joinscript would actually activate the module. This can be simulated like this:

```
eval "$(ucr shell)"; . /usr/share/univention-samba4/lib/base.sh; samba4_ldb_sam_module_prepend
```