Bug 33881

Summary:	Freshly provisioned school dc overwrites default GPOs
Product:	UCS	Reporter:	Sönke Schwardt-Krummrich <schwardt>
Component:	Samba4	Assignee:	Arvid Requate <requate>
Status:	CLOSED FIXED	QA Contact:	Stefan Gohmann <gohmann>
Severity:	normal
Priority:	P5	CC:	gohmann, jmm, requate
Version:	UCS 3.2
Target Milestone:	UCS 3.2-0-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Sönke Schwardt-Krummrich

2014-01-09 13:22:35 CET

During provisioning of a new school dc the default policies "Default Domain Policy" and "Default Domaincontroller Policy" will be created on the local SYSVOL share. The policy object files always get the same name during provisioning.

Due to the newer modification timestamp of the files on the SYSVOL share, the rsync mechanism copies the new, empty versions to all other school dcs. Therefore any changes done so far to those two policies, may/will be overwritten.

Comment 1 Arvid Requate

2014-01-09 15:55:27 CET

Probably we should fix this in univention-samba4 and do the initial call to sysvol-sync.sh with a new option like "--overwrite-local".

Comment 2 Arvid Requate

2014-01-13 18:54:24 CET

Fixed in errata3.2-0.
Advisory: 2014-01-08-univention-samba4.yaml

Comment 3 Stefan Gohmann

2014-01-22 15:20:24 CET

YAML: OK
Test: OK
Test @School: OK

Comment 4 Moritz Muehlenhoff

2014-01-29 11:18:30 CET

http://errata.univention.de/ucs/3.2/35.html