Bug 45473 - (4.2) Group blacklist for exam-master module
(4.2) Group blacklist for exam-master module
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: UMC - Exam mode
UCS@school 4.2
Other Linux
: P5 normal (vote)
: UCS@school 4.2 v4
Assigned To: Sönke Schwardt-Krummrich
Florian Best
:
Depends on: 44073
Blocks:
  Show dependency treegraph
 
Reported: 2017-09-29 13:13 CEST by Sönke Schwardt-Krummrich
Modified: 2017-10-16 21:33 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.286
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2017032021000298
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2017-09-29 13:13:38 CEST
This feature is missing in UCS@school 4.2

+++ This bug was initially created as a clone of Bug #44073 +++

When exam users are created, all group memberships of the original user object are copied. At least one customer has additional group memberships for all UCS@school users that slow down until the exam mode fails (timeout occurs).

The attached, untested patch implements a UCR variable that allows the admin to specify a regular expression of group DNs that are ignored during exam user creation.

The patch logs if the UMC module was unable to compile the regexp (loglevel ERROR) and which groups have been ignored (loglevel INFO).

Workaround: apply patch in production system:
# cd /usr/share/pyshared/univention/management/console/modules/schoolexam-master
# patch -p6 < /path/to/exammode-ignore-groups.patch
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2017-09-29 14:13:45 CEST
This feature was already present in UCS@school 4.1R2 but did not make it into UCS@school 4.2. The feature has been ported to 4.2 with the following commits:

ucs-school-umc-exam.yaml:
2e80e23ce081 | Bug #45473: Merge branch 'sschwardt/45473/42/group-blacklist-for-exam-mode' into 4.2
fe29c668af08 | Bug #45473: add entry to advisory

ucs-school-umc-exam (7.0.4-15):
2e80e23ce081 | Bug #45473: Merge branch 'sschwardt/45473/42/group-blacklist-for-exam-mode' into 4.2
3acdb1a8a621 | Bug #45473: add changelog entry
3b6b45e48b43 | Bug #45473: port feature ucsschool/exam/group/ldap/blacklist/regex from 4.1R2 to 4.2
e951b2bcc6d4 | Bug #45473: fix wrong indention introduced via Bug #43019


Special note:
Commit bdf34bc8e66f904f9de1c8b3fcd0582e83f21c4b fixes a block with wrong indention that has been introduced with bug #43019 (no functional impairment!).
Due to the wrong indention, there is no performance gain, since group
changes are always performed directly if a user object is examined.
If the code block is moved to the left, it is only executed when all
users have been examined and group changes are only performed once.

The changes have been tested in a large U@S 4.2 customer environment. The missing UCR variable description has also been added.
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2017-09-29 15:57:01 CEST
Package: ucs-school-umc-exam
Version: 7.0.4-16A~4.2.0.201709291554
Branch: ucs_4.2-0
Scope: ucs-school-4.2
Comment 3 Florian Best univentionstaff 2017-10-05 18:59:16 CEST
OK: merge
OK: indentation
OK: YAML
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2017-10-16 21:32:04 CEST
UCS@school 4.2 v4 has been released.

http://docs.software-univention.de/changelog-ucsschool-4.2v4-de.html

If this error occurs again, please clone this bug.