Bug 58471 - memberOf in Samba 4 stops working (5.0-10 backport)
Summary: memberOf in Samba 4 stops working (5.0-10 backport)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Samba4
Version: UCS 5.0
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.0-10-errata
Assignee: Arvid Requate
QA Contact: Johannes Königer
URL: https://git.knut.univention.de/univen...
Keywords:
Depends on: 53882
Blocks: 58470
  Show dependency tree / graph
 
Reported: 2025-07-15 13:35 CEST by Arvid Requate
Modified: 2025-07-23 16:45 CEST (History)
14 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 4: Will affect most installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.571
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2021091021000289, 2023091121000354, 2025021821000181, 2025070621000033, 2025070821000155
Bug group (optional):
Customer ID: 00009
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2025-07-15 13:35:13 CEST 
We should backport the configuration adjustment for the S4-Connector to UCS 5.0-10 to protect non-updated non-primary-systems running an S4-Connector (e.g. UCS@school replicas).

+++ This bug was initially created as a clone of Bug #53882 +++
Comment 1 Arvid Requate univentionstaff 2025-07-21 16:59:21 CEST 
7734d735da4 feat(s4-connector): Add "Pre-Windows 2000 Compatible Access", "Windows Authorization Access Group" and "IIS_IUSRS" to connector/s4/mapping/group/ignorelist.
21f7b9d9142 feat(diagnostic): Diagnostic module for memberOf in Samba/AD
cd23352ad1f fix(diagnostic): Mitigate missing button spacing
e45c370aff1 fix(samba4): Create "Pre-Windows 2000 Compatible Access", "Windows Authorization Access Group" and "IIS_IUSRS" in UDM via joinscript

Package: univention-s4-connector                                                                                                                                                             
Version: 14.0.21                                                                                                                                                                             
Branch: 5.0-0                                                                                                                                                                                
Scope: errata5.0-10

Package: univention-samba4
Version: 9.0.20
Branch: 5.0-0
Scope: errata5.0-10

Package: univention-management-console-module-diagnostic
Version: 6.0.12
Branch: ucs_5.0-0-errata5.0-10
Scope: errata5.0-10