Bug 47048

Summary:	S4-connector removes extended attribute that were added after the last connector restart
Product:	UCS	Reporter:	Felix Botner <botner>
Component:	S4 Connector	Assignee:	Arvid Requate <requate>
Status:	CLOSED FIXED	QA Contact:	Felix Botner <botner>
Severity:	normal
Priority:	P5	CC:	damrose, gohmann
Version:	UCS 4.2
Target Milestone:	UCS 4.2-4-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	Bug Report	What type of bug is this?:	6: Setup Problem: Issue for the setup process
Who will be affected by this bug?:	3: Will affect average number of installed domains	How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.309	Enterprise Customer affected?:
School Customer affected?:		ISV affected?:	Yes
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:	46972
Bug Blocks:

Description Felix Botner

2018-05-23 13:29:00 CEST

+++ This bug was initially created as a clone of Bug #46972 +++

Reproducer: UCS 4.3 with samba4
Install owncloud. A new extended Attribute is added during installation. All existing users should now be activated for ownCloud with the LDAP attribute ownCloudEnabled=1. The extAttr default is 1, so all new users should be enabled as well.
Result: Users are created with ownCloudEnabled=1. After some connector cycles, the LDAP attribute disappears.

See debuglevel 4 logfile, existing user=Administrator, new user=univention.
At timestamp 07.05.2018 16:15:46,249 the user univention seems to be modified and the ownCloudEnabled attribute is removed.

This also happens when joining a UCS into an AD domain during system setup! Users synced from AD are not activated for the app.

Restarting the connector solves the issue.

When no samba4 is installed, the issue does not occur.

Comment 1 Arvid Requate

2018-06-25 17:27:14 CEST

8a2171c1fd | Backported patch
055d4f7e78 | Advisory

Comment 2 Felix Botner

2018-06-27 09:26:02 CEST

OK - univention-s4-connector
OK - YAML

Comment 3 Erik Damrose

2018-06-27 15:09:40 CEST

<http://errata.software-univention.de/ucs/4.2/423.html>