Bug 46334 - Opsi users counts against server license
Opsi users counts against server license
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: License
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.3-0-errata
Assigned To: Dirk Wiesenthal
Felix Botner
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-02-19 11:59 CET by Christina Scheinig
Modified: 2018-04-18 13:51 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.103
Enterprise Customer affected?: Yes
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2018021921000228, 2017031709000086
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christina Scheinig univentionstaff 2018-02-19 11:59:39 CET
After the installation of Opsi, two new users (pcpatch, opsiconfd) are counted against the license.
The customer cannot administrate his server via UMC anymore.
Comment 1 Dirk Wiesenthal univentionstaff 2018-03-23 11:09:43 CET
Done by adding "pcpatch" and "opsiconfd" to the list of sysAccountNames. This means that we ship usernames of third party Apps in our product. The correct way would be to use univentionObjectFlag=functional for these users or use a users/ldap instead. But it is much easier this way, especially because (if I am not mistaken) at least pcpatch needs to be added to Samba 4.

univention-directory-manager-modules 13.0.21-16A~4.3.0.201803231109


Before

root@master80:~# univention-license-check --list-dns
[...]
Users:                       6 of unlimited... OK
  uid=Administrator,cn=users,dc=frosta-8x,dc=intranet
  uid=ffischeruni,cn=users,dc=frosta-8x,dc=intranet
  uid=pcpatch,cn=users,dc=frosta-8x,dc=intranet
  uid=opsiconfd,cn=users,dc=frosta-8x,dc=intranet
  uid=http-proxy-slave82,cn=users,dc=frosta-8x,dc=intranet
  uid=oxadmin,cn=users,dc=frosta-8x,dc=intranet
  uid=u10,cn=users,ou=gs1,dc=frosta-8x,dc=intranet
  uid=u1,dc=frosta-8x,dc=intranet
  2 Systemaccounts are ignored.
[...]


After

root@master80:~# univention-license-check --list-dns
[...]
Users:                       4 of unlimited... OK
  uid=Administrator,cn=users,dc=frosta-8x,dc=intranet
  uid=ffischeruni,cn=users,dc=frosta-8x,dc=intranet
  uid=pcpatch,cn=users,dc=frosta-8x,dc=intranet
  uid=opsiconfd,cn=users,dc=frosta-8x,dc=intranet
  uid=http-proxy-slave82,cn=users,dc=frosta-8x,dc=intranet
  uid=oxadmin,cn=users,dc=frosta-8x,dc=intranet
  uid=u10,cn=users,ou=gs1,dc=frosta-8x,dc=intranet
  uid=u1,dc=frosta-8x,dc=intranet
  4 Systemaccounts are ignored.
[...]
Comment 2 Felix Botner univentionstaff 2018-04-06 11:46:33 CEST
-> udm users/user create --set username=pcpatch --set lastname=t1 --set password=univention

-> udm users/user create --set username=opsiconfd --set lastname=t1 --set password=univention

-> univention-license-check 
Base DN: dc=four,dc=three
Checking searchpath... OK
Checking basedn    ... OK
Checking enddate   ... OK
Checking signature ... OK
Users:                       2 of unlimited... OK

UPGRADE

-> univention-license-check 
Base DN: dc=four,dc=three
Checking searchpath... OK
Checking basedn    ... OK
Checking enddate   ... OK
Checking signature ... OK
Users:                       0 of unlimited... OK

OK - univention-directory-manager-modules
OK - YAML
Comment 3 Arvid Requate univentionstaff 2018-04-18 13:51:58 CEST
<http://errata.software-univention.de/ucs/4.3/13.html>