Bug 47844

Summary: Encourage to use univentionObjectType on all LDAP objects
Product: UCS Reporter: Dirk Wiesenthal <wiesenthal>
Component: UMC - System diagnosticAssignee: Dirk Wiesenthal <wiesenthal>
Status: CLOSED FIXED QA Contact: Johannes Keiser <keiser>
Severity: normal    
Priority: P5 CC: ahlers, keiser
Version: UCS 4.3   
Target Milestone: UCS 4.3-2-errata   
Hardware: Other   
OS: Linux   
See Also: https://forge.univention.org/bugzilla/show_bug.cgi?id=48390
What kind of report is it?: Bug Report What type of bug is this?: 2: Improvement: Would be a product improvement
Who will be affected by this bug?: 5: Will affect all installed domains How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.057 Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on:    
Bug Blocks: 47846    

Description Dirk Wiesenthal univentionstaff 2018-09-20 16:32:11 CEST
We should add a diagnostic plugin that scans through all LDAP objects and identifies those that lack "univentionObjectType" but seem to be some sort of  "univention object".

Also we should provide a one-click solution to add these object types.
Comment 1 Dirk Wiesenthal univentionstaff 2018-09-20 16:39:32 CEST
This is important for some services to use convenient LDAP filters. Currently, the LDAP filter for users/user looks obscure and may even change at some point.

Added in
  univention-management-console-module-diagnostic 4.0.1-1A~4.3.0.201809201635

objects beneath cn=temporary,cn=univention,$ldap_base are ignored.

Also check performance issues with this new plugin. I had none.
Comment 2 Ole Schwiegert univentionstaff 2018-09-26 12:18:58 CEST
Changelog & Advisories: OK

Tested mainly with users, but also other univention objects like computer, portals etc. The module worked fine and migrated the objects.

The performance was tested with 8000 users, containing 700|2000 malformed users.
Comment 4 Dirk Wiesenthal univentionstaff 2018-10-10 19:03:09 CEST
Fixed by filtering kerberos/kdcentry for now. Should be reverted as soon as Bug#47846 is fixed.
Comment 5 Johannes Keiser univentionstaff 2018-10-11 09:53:15 CEST
(In reply to Dirk Wiesenthal from comment #4)
> Fixed by filtering kerberos/kdcentry for now. Should be reverted as soon as
> Bug#47846 is fixed.

OK: objects of type kerberos/kdcentry are ignored
OK: YAML (5f8be4c3b9 typo)
OK: Test
-> verified
Comment 6 Arvid Requate univentionstaff 2018-12-05 14:39:19 CET
<http://errata.software-univention.de/ucs/4.3/352.html>
Comment 7 Daniel Tröder univentionstaff 2019-02-11 12:47:06 CET
*** Bug 47366 has been marked as a duplicate of this bug. ***