Univention Bugzilla – Full Text Bug Listing |
Summary: | sync ntSecurityDescriptor of groupPolicyContainer objects | ||
---|---|---|---|
Product: | UCS | Reporter: | Arvid Requate <requate> |
Component: | S4 Connector | Assignee: | Arvid Requate <requate> |
Status: | CLOSED FIXED | QA Contact: | Stefan Gohmann <gohmann> |
Severity: | normal | ||
Priority: | P5 | CC: | gohmann, walkenhorst |
Version: | UCS 4.0 | ||
Target Milestone: | UCS 4.0-0-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
What kind of report is it?: | --- | What type of bug is this?: | --- |
Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
User Pain: | Enterprise Customer affected?: | ||
School Customer affected?: | ISV affected?: | ||
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | Bug group (optional): | ||
Max CVSS v3 score: | |||
Bug Depends on: | 36979 | ||
Bug Blocks: |
Description
Arvid Requate
2014-11-24 19:40:18 CET
Fixed. Testcase: 52_s4connector/100sync_gpo_ntsecurity_descriptor Advisory: 2014-11-27-univention-s4-connector.yaml YAML: OK Code review: OK You can now add filters to resync_object_from_s4.py. But the tool doesn't check if the object will be synced. This will caused errors like this: 25.11.2014 08:03:41,572 LDAP (ERROR ): sync of rejected object failed CN=ipsecNegotiationPolicy{72385233-70FA-11D1-864C-14A300000000},CN=IP Security,CN=System,DC=deadlock40,DC=intranet 25.11.2014 08:03:41,572 LDAP (ERROR ): Traceback (most recent call last): File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2055, in resync_rejected sync_successfull = self.sync_to_ucs(property_key, mapped_object, premapped_s4_dn, object) File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 1326, in sync_to_ucs if self.property[property_type].sync_mode in ['write', 'none']: KeyError: None Test case: OK Test UCS upgrade: OK Test UCS new installation: OK Test UCS@school upgrade: OK Test UCS@school installation: OK > As discussed, maybe we sync the ntSecurityDesciptor in @school setups only.
Code and advisory have been updated. There is a new errata bug for UCS@schoool 4.0 to activate synchronization.
(In reply to Arvid Requate from comment #3) > > As discussed, maybe we sync the ntSecurityDesciptor in @school setups only. > > Code and advisory have been updated. There is a new errata bug for > UCS@schoool 4.0 to activate synchronization. That's Bug #37350. Code review: OK Tests: OK |