Bug 47008

Summary:	S4 Connector: Make global_ignore_subtree configurable via UCR
Product:	UCS	Reporter:	Andreas Peichert <peichert>
Component:	S4 Connector	Assignee:	Julia Bremer <bremer>
Status:	CLOSED FIXED	QA Contact:	Arvid Requate <requate>
Severity:	enhancement
Priority:	P5	CC:	bremer, gohmann, grandjean, stoeckigt
Version:	UCS 4.2
Target Milestone:	UCS 4.4-0-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	Feature Request	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:	Yes
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:	2017082821000103, 2018092821000743	Bug group (optional):	External feedback
Max CVSS v3 score:
Bug Depends on:	41680
Bug Blocks:
Attachments:	wording.diff

Description Andreas Peichert

2018-05-15 10:30:24 CEST

The S4 Connector mapping file uses 'global_ignore_subtree' to ignore many DN subtrees. Similar to the AD Connector the hard coded list should be extend by UCR for the S4 Connector as well i.e. "connector/s4/mapping/ignoresubtree"

+++ This bug was initially created as a clone of Bug #41680 +++

The AD Connector mapping file uses 'global_ignore_subtree' to ignore a bunch of LDAP subtrees so they do NOT get synchronized. Unfortunately this is a hard coded list and not configurable. In some scenarios this ignore list must be extended so we should make this possible, just as other objects can be ignored via UCR, too (groups, users, containers ...)

Comment 1 Nico Stöckigt

2018-10-15 10:36:37 CEST

There are obvious scenarios in which it seems to be quite handy to be able to ignore subtrees. In a customer environment there is an additional DNS-Zone for which Samba/AD SRV-Records had been created but they should not be replicated due to they will be rejected anyway.

Comment 2 Julia Bremer

2019-04-18 10:21:44 CEST

Successful build
Package: univention-s4-connector
Version: 13.0.2-6A~4.4.0.201904171907
Branch: ucs_4.4-0
Scope: errata4.4-0
User: jbremer
Host: dimma.knut.univention.de
Logfile Path: /var/univention/buildsystem2/logs/ucs_4.4-0-0-errata4.4-0/univention-s4-connector_13.0.2-6A~4.4.0.201904171907.log.bz2

1685388539 Bug #47008: Make global_ignore_subtree configurable via ucr variable connector/s4/mapping/ignoresubtree/*


I replicated the behaviour of connector/ad/mapping/ignoresubtree/ 
to create the ucr variable connector/s4/mapping/ignoresubtree,
to keep the consistency between the two.

Comment 3 Arvid Requate

2019-04-23 19:32:01 CEST

Created attachment 9988 [details]
wording.diff

Verified:
* Works

In comparison with the AD-Connector, the description of the UCS variables is a bit terse. See attached patch suggestion.

Comment 4 Julia Bremer

2019-04-24 09:09:16 CEST

Successful build
Package: univention-s4-connector
Version: 13.0.2-7A~4.4.0.201904240903
Branch: ucs_4.4-0
Scope: errata4.4-0
User: jbremer

a27dc67122 Bug #47008: Yaml
2e8d1395cb Bug #47008: Adjust variable description of connector/s4/mapping/ignoresubtree


I adjusted the variable description and advisory wording according to your suggestions.

Comment 5 Arvid Requate

2019-04-24 11:48:49 CEST

Verified:
* Variable description
* Advisory

Comment 6 Arvid Requate

2019-04-24 13:13:01 CEST

<http://errata.software-univention.de/ucs/4.4/58.html>