Bug 31090
| Summary: | Add (configurable) con_subtree_delete_objects to windowscomputer | ||
|---|---|---|---|
| Product: | UCS | Reporter: | Janis Meybohm <meybohm> |
| Component: | S4 Connector | Assignee: | Connector maintainers <connector-maintainers> |
| Status: | RESOLVED DUPLICATE | QA Contact: | |
| Severity: | normal | ||
| Priority: | P5 | CC: | gohmann, requate |
| Version: | UCS 3.1 | ||
| Target Milestone: | UCS 3.x | ||
| Hardware: | Other | ||
| OS: | Linux | ||
| See Also: | https://forge.univention.org/bugzilla/show_bug.cgi?id=33882 | ||
| What kind of report is it?: | --- | What type of bug is this?: | --- |
| Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
| User Pain: | Enterprise Customer affected?: | Yes | |
| School Customer affected?: | ISV affected?: | ||
| Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
| Ticket number: | 2013040821002261 | Bug group (optional): | |
| Max CVSS v3 score: | |||
We will not ship a UCS 3.1-2 release; the next UCS release will be UCS 3.2. As such, this bug is moved to the new target milestone. |
Ticket#: 2013040821002261 Installation of a Terminal Server License Server creates a leaf object "CN=TermServLicensing" below the computer account in AD. Removing the computer thus leads to a reject & traceback: --- 18.04.2013 10:52:29,465 LDAP (PROCESS): sync from ucs: Resync rejected file: /var/lib/univention-connector/s4/1366274575.694388 18.04.2013 10:52:29,474 LDAP (PROCESS): sync from ucs: [windowscomputer] [ delete] cn=w2k8r2-64,cn=computers,dc=s4lish,dc=qa 18.04.2013 10:52:29,527 LDAP (WARNING): delete subobject: CN=TermServLicensing,CN=W2K8R2-64,CN=Computers,DC=s4lish,DC=qa 18.04.2013 10:52:29,544 LDAP (WARNING): sync failed, saved as rejected 18.04.2013 10:52:29,545 LDAP (WARNING): Traceback (most recent call last): File "/usr/lib/pymodules/python2.6/univention/s4connector/__init__.py", line 753, in __sync_file_from_ucs or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old))): File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2338, in sync_from_ucs self.delete_in_s4( object, property_type ) File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2377, in delete_in_s4 if not self.sync_from_ucs(key, subobject, object_mapping['dn']): File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2127, in sync_from_ucs if self.property[property_type].sync_mode in ['read', 'none']: KeyError: None --- bug26210 implements the con_subtree_delete_objects to remove "cn=rid set" together with DC accounts. We should add a default con_subtree_delete_objects list (extendable via UCR) to 'windowscomputer': univention.s4connector.property: --- /etc/univention/connector/s4/mapping.orig 2013-04-18 10:55:09.000000000 +0200 +++ /etc/univention/connector/s4/mapping 2013-04-18 10:52:42.000000000 +0200 @@ -472,6 +472,7 @@ con_create_attributes=[('userAccountControl', ['4096'])], + con_subtree_delete_objects = [ 'cn=termservlicensing' ], #post_con_create_functions = [ univention.connector.s4.computers. post_con_modify_functions=[