Bug 58470 - memberOf in Samba 4 stops working (5.2-1 backport)
Summary: memberOf in Samba 4 stops working (5.2-1 backport)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Samba4
Version: UCS 5.2
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.2-1-errata
Assignee: Arvid Requate
QA Contact: Johannes Königer
URL: https://git.knut.univention.de/univen...
Keywords:
Depends on: 53882 58471
Blocks:
  Show dependency tree / graph
 
Reported: 2025-07-15 13:32 CEST by Arvid Requate
Modified: 2025-07-23 16:29 CEST (History)
14 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 4: Will affect most installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.571
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2021091021000289, 2023091121000354, 2025021821000181, 2025070621000033, 2025070821000155
Bug group (optional):
Customer ID: 00009
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2025-07-15 13:32:13 CEST 
We should backport the configration adjustment for the S4-Connector to UCS 5.2-1 to protect non-updated non-primary-systems running an S4-Connector (e.g. UCS@school replicas).

Since there are other changes made in the S4-Connector for 5.2-2 we need to craft and release a dedicated backport package.

+++ This bug was initially created as a clone of Bug #53882 +++
Comment 1 Arvid Requate univentionstaff 2025-07-21 16:57:53 CEST 
64ff911bf8f feat(s4-connector): Add "Pre-Windows 2000 Compatible Access", "Windows Authorization Access Group" and "IIS_IUSRS" to connector/s4/mapping/group/ignorelist.
1d0b92ead1a feat(diagnostic): Diagnostic module for memberOf in Samba/AD
7899efe2a6d fix(diagnostic): Mitigate missing button spacing
c12ec4bf4e4 fix(samba4): Create "Pre-Windows 2000 Compatible Access", "Windows Authorization Access Group" and "IIS_IUSRS" in UDM via joinscript

Package: univention-s4-connector
Version: 16.0.8
Branch: ucs_5.2-0-errata5.2-1
Scope: errata5.2-1

Package: univention-samba4
Version: 11.0.12
Branch: ucs_5.2-0-errata5.2-1
Scope: errata5.2-1

Package: univention-management-console-module-diagnostic
Version: 8.0.21
Branch: ucs_5.2-0-errata5.2-1
Scope: errata5.2-1