When we added the guardianInheritedRoles to UDM during Bug #57111 to all users and computer objects. We added them to users/ldap as well, not realizing, that those users have no group property. While creation is succesful, when trying to modify the user in the "LDAP directory" UMC module it fails with this traceback: Internal server error during "udm/get (navigation)". Request: udm/get (navigation) Traceback (most recent call last): File "%PY3%/univention/management/console/modules/decorators.py", line 259, in _run result = self._function(*args, **kwargs) # type: Union[BaseException, _T] File "%PY3%/univention/management/console/modules/udm/__init__.py", line 496, in get return self._get(request) File "%PY3%/univention/management/console/modules/udm/__init__.py", line 553, in _get prop.lazy_load(obj) File "%PY3%/univention/admin/__init__.py", line 398, in lazy_load getattr(obj, self.lazy_loading_fn)() File "%PY3%/univention/admin/guardian_roles.py", line 141, in open_guardian self.info['guardianInheritedRoles'] = load_roles(self.lo, self['groups'] + [self['primaryGroup']]) File "%PY3%/univention/admin/handlers/__init__.py", line 525, in __getitem__ elif key not in self.__no_default and self.descriptions[key].editable: KeyError: 'groups' The guardianInheritedRoles are only fetched when using the UMC. UDM create, modify etc. works as expected. We need to remove the guardianInheritedRoles attribute from users/ldap. I think they still need guardianRoles though.
> When we added the guardianInheritedRoles to UDM during Bug #57111 to all users and computer objects. Correct bug is 57110
*** Bug 57227 has been marked as a duplicate of this bug. ***
Property guardianInheritedRoles was removed from users/ldap 5.0-7 univention-directory-manager-modules.yaml 6b3e4c98cf4d | Bug #57228: Remove guardian roles properties from users/ldap univention-directory-manager-modules (15.0.26-10) 6b3e4c98cf4d | Bug #57228: Remove guardian roles properties from users/ldap 5.1-0 univention-directory-manager-modules (16.0.21) c482dde179a2 | Bug #57228: Remove guardian roles properties from users/ldap 5.2-0 univention-directory-manager-modules (17.0.9) c0d47daa5697 | Bug #57228: Remove guardian roles properties from users/ldap
Package: univention-directory-manager-modules Version: 15.0.26-10 Branch: ucs_5.0-0-errata5.0-7 Scope: errata5.0-7 Package: univention-directory-manager-modules Version: 16.0.21 Branch: ucs_5.1-0 Scope: Package: univention-directory-manager-modules Version: 17.0.9 Branch: ucs_5.2-0 Scope:
5.0-7 ucs-test (10.0.21-43) a134f930daab | fix(test): fix 77_test_roles remove guardianInheritedRoles from users/ldap 5.1-0 ucs-test (11.0.39) f7d4f5b8862f | fix(test): fix 77_test_roles remove guardianInheritedRoles from users/ldap 5.2-0 ucs-test (12.0.79) ede5fe8f42b5 | fix(test): fix 77_test_roles remove guardianInheritedRoles from users/ldap
QA: OK: manual QA - opening/modifying users/ldap object in UMC OK: changes were applied to 5.0-7, 5.1-0 and 5.2-0 OK: jenkins test results OK: advisories
<https://errata.software-univention.de/#/?erratum=5.0x1048>
*** Bug 57305 has been marked as a duplicate of this bug. ***