Bug 50642

Summary:	Replicate cn=IP Security,CN=System from Master Samba/AD to School Slave via OpenLDAP
Product:	UCS	Reporter:	Florian Best <best>
Component:	S4 Connector	Assignee:	Samba maintainers <samba-maintainers>
Status:	NEW ---	QA Contact:	Samba maintainers <samba-maintainers>
Severity:	normal
Priority:	P5	CC:	best, botner, bremer, brodersen, goericke, markus.daehlmann, michelsmidt, requate
Version:	UCS 4.4
Target Milestone:	---
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:	0.171	Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:	49838
Bug Blocks:	50626, 50641

Description Florian Best

2019-12-16 14:48:08 CET

We should replicate the container CN=IP Security,CN=System.
Otherwise the default MS GP IP security are not syncronized between UCS and Samba 4.

It's currently ignored in the global_ignore_subtree list.

Patch:
diff --git services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
index ff2d20f244..8c1c890315 100644
--- services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
+++ services/univention-s4-connector/conffiles/etc/univention/s4connector/s4/mapping.py
@@ -64,7 +64,6 @@ global_ignore_subtree = [
        'CN=Server,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=ComPartitionSets,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=ComPartitions,CN=System,@%@connector/s4/ldap/base@%@',
-       'CN=IP Security,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=DFSR-GlobalSettings,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=DomainUpdates,CN=System,@%@connector/s4/ldap/base@%@',
        'CN=Password Settings Container,CN=System,@%@connector/s4/ldap/base@%@',


+++ This bug was initially created as a clone of Bug #49838 +++