Bug 42618

Summary:	AD Connector: configure sync_mode on attribute level
Product:	UCS	Reporter:	Michael Grandjean <grandjean>
Component:	AD Connector	Assignee:	Arvid Requate <requate>
Status:	CLOSED FIXED	QA Contact:	Stefan Gohmann <gohmann>
Severity:	normal
Priority:	P5	CC:	alexander.wotschke, andree.hingst, gohmann, michelsmidt, oyen, requate, stephan.hendl
Version:	UCS 4.1	Flags:	oyen: Patch_Available+
Target Milestone:	UCS 4.1-4-errata
Hardware:	Other
OS:	Linux
See Also:	https://forge.univention.org/bugzilla/show_bug.cgi?id=42615
What kind of report is it?:	Feature Request	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:	Yes
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:	2013112121005836	Bug group (optional):	External feedback
Max CVSS v3 score:
Bug Depends on:
Bug Blocks:	42524, 43229
Attachments:	Implement per Attribute `sync_mode`.

Description Michael Grandjean

2016-10-10 14:25:18 CEST

The S4 Connector can handle the sync_mode (read, write, sync, none) for every attribute independently. The AD Connector can only handle the sync_mode on an object level (users, groups, OU, container, computers). 

It would be very helpful if the AD Connector could be extended to the same feature set as the S4 Connector, so something like this would be possible:

Global user object setting:
> ucr set connector/ad/mapping/user/syncmode='sync'

Differing attribute settings:
> [...]
> 'pager': univention.connector.attribute (
>                 sync_mode='write'
>                 ucs_attribute='pagerTelephoneNumber',
>                 ldap_attribute='pager',
>                 con_attribute='pager',
>                 con_other_attribute='otherPager',
>         ),
> 'displayName': univention.connector.attribute (
>                 sync_mode='read'
>                 ucs_attribute='displayName',
>                 ldap_attribute='displayName',
>                 con_attribute='displayName',
>        ),
> [...]

Comment 1 Lukas Oyen

2017-01-11 14:49:17 CET

Created attachment 8347 [details]
Implement per Attribute `sync_mode`.

The attached patch adds the per attribute `sync_mode`.

All ad-connector tests running on a UCS 4.1-4 master connected to a Windows Server 2012 in sync mode are passing.

Comment 2 Arvid Requate

2017-01-25 19:33:00 CET

I fixed this along with Bug #43216.
Advisory: univention-ad-connector.yaml

Comment 3 Lukas Oyen

2017-01-26 13:21:19 CET

This was not merged to 4.2 but Felix change in r76088 depends on in.

Comment 4 Arvid Requate

2017-01-30 18:05:34 CET

> This was not merged to 4.2 but Felix change in r76088 depends on in.

It's merged now.

Comment 5 Stefan Gohmann

2017-01-31 16:50:48 CET

Jenkins tests: OK

Changelog: OK, it is part of Bug #43216

UCS 4.2 merge: OK

Code review: OK

Tests: OK

Comment 6 Janek Walkenhorst

2017-02-01 12:07:18 CET

<http://errata.software-univention.de/ucs/4.1/386.html>