Description Janis Meybohm 2013-04-18 11:00:21 CEST

Ticket#: 2013040821002261

Installation of a Terminal Server License Server creates a leaf object "CN=TermServLicensing" below the computer account in AD. Removing the computer thus leads to a reject & traceback:

---
18.04.2013 10:52:29,465 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/s4/1366274575.694388
18.04.2013 10:52:29,474 LDAP        (PROCESS): sync from ucs: [windowscomputer] [    delete] cn=w2k8r2-64,cn=computers,dc=s4lish,dc=qa
18.04.2013 10:52:29,527 LDAP        (WARNING): delete subobject: CN=TermServLicensing,CN=W2K8R2-64,CN=Computers,DC=s4lish,DC=qa
18.04.2013 10:52:29,544 LDAP        (WARNING): sync failed, saved as rejected
18.04.2013 10:52:29,545 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.6/univention/s4connector/__init__.py", line 753, in __sync_file_from_ucs
    or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old))):
  File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2338, in sync_from_ucs
    self.delete_in_s4( object, property_type )
  File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2377, in delete_in_s4
    if not self.sync_from_ucs(key, subobject, object_mapping['dn']):
  File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2127, in sync_from_ucs
    if self.property[property_type].sync_mode in ['read', 'none']:
KeyError: None
---


bug26210 implements the con_subtree_delete_objects to remove "cn=rid set" together with DC accounts. We should add a default con_subtree_delete_objects list (extendable via UCR) to 'windowscomputer': univention.s4connector.property:

--- /etc/univention/connector/s4/mapping.orig   2013-04-18 10:55:09.000000000 +0200
+++ /etc/univention/connector/s4/mapping        2013-04-18 10:52:42.000000000 +0200
@@ -472,6 +472,7 @@
 
                        con_create_attributes=[('userAccountControl', ['4096'])],
 
+                       con_subtree_delete_objects = [ 'cn=termservlicensing' ],
                        #post_con_create_functions = [ univention.connector.s4.computers.
                        post_con_modify_functions=[