Univention Bugzilla – Dependency tree for Bug 47689
udm --policy-dereference option does modify the ldap directly instead of using an udm handler