Bug 46334
| Summary: | Opsi users counts against server license | ||
|---|---|---|---|
| Product: | UCS | Reporter: | Christina Scheinig <scheinig> |
| Component: | License | Assignee: | Dirk Wiesenthal <wiesenthal> |
| Status: | CLOSED FIXED | QA Contact: | Felix Botner <botner> |
| Severity: | normal | ||
| Priority: | P5 | CC: | gohmann, luft, wiesenthal |
| Version: | UCS 4.2 | ||
| Target Milestone: | UCS 4.3-0-errata | ||
| Hardware: | Other | ||
| OS: | Linux | ||
| What kind of report is it?: | Bug Report | What type of bug is this?: | 3: Simply Wrong: The implementation doesn't match the docu |
| Who will be affected by this bug?: | 2: Will only affect a few installed domains | How will those affected feel about the bug?: | 3: A User would likely not purchase the product |
| User Pain: | 0.103 | Enterprise Customer affected?: | Yes |
| School Customer affected?: | Yes | ISV affected?: | |
| Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
| Ticket number: | 2018021921000228, 2017031709000086 | Bug group (optional): | |
| Max CVSS v3 score: | |||
|
Description
Christina Scheinig
Done by adding "pcpatch" and "opsiconfd" to the list of sysAccountNames. This means that we ship usernames of third party Apps in our product. The correct way would be to use univentionObjectFlag=functional for these users or use a users/ldap instead. But it is much easier this way, especially because (if I am not mistaken) at least pcpatch needs to be added to Samba 4. univention-directory-manager-modules 13.0.21-16A~4.3.0.201803231109 Before root@master80:~# univention-license-check --list-dns [...] Users: 6 of unlimited... OK uid=Administrator,cn=users,dc=frosta-8x,dc=intranet uid=ffischeruni,cn=users,dc=frosta-8x,dc=intranet uid=pcpatch,cn=users,dc=frosta-8x,dc=intranet uid=opsiconfd,cn=users,dc=frosta-8x,dc=intranet uid=http-proxy-slave82,cn=users,dc=frosta-8x,dc=intranet uid=oxadmin,cn=users,dc=frosta-8x,dc=intranet uid=u10,cn=users,ou=gs1,dc=frosta-8x,dc=intranet uid=u1,dc=frosta-8x,dc=intranet 2 Systemaccounts are ignored. [...] After root@master80:~# univention-license-check --list-dns [...] Users: 4 of unlimited... OK uid=Administrator,cn=users,dc=frosta-8x,dc=intranet uid=ffischeruni,cn=users,dc=frosta-8x,dc=intranet uid=pcpatch,cn=users,dc=frosta-8x,dc=intranet uid=opsiconfd,cn=users,dc=frosta-8x,dc=intranet uid=http-proxy-slave82,cn=users,dc=frosta-8x,dc=intranet uid=oxadmin,cn=users,dc=frosta-8x,dc=intranet uid=u10,cn=users,ou=gs1,dc=frosta-8x,dc=intranet uid=u1,dc=frosta-8x,dc=intranet 4 Systemaccounts are ignored. [...] -> udm users/user create --set username=pcpatch --set lastname=t1 --set password=univention -> udm users/user create --set username=opsiconfd --set lastname=t1 --set password=univention -> univention-license-check Base DN: dc=four,dc=three Checking searchpath... OK Checking basedn ... OK Checking enddate ... OK Checking signature ... OK Users: 2 of unlimited... OK UPGRADE -> univention-license-check Base DN: dc=four,dc=three Checking searchpath... OK Checking basedn ... OK Checking enddate ... OK Checking signature ... OK Users: 0 of unlimited... OK OK - univention-directory-manager-modules OK - YAML |