Bug 47844 – Encourage to use univentionObjectType on all LDAP objects

Bug 47844 - Encourage to use univentionObjectType on all LDAP objects


Summary:	Encourage to use univentionObjectType on all LDAP objects

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	UMC - System diagnostic
Version:	UCS 4.3
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 4.3-2-errata
Assigned To:	Dirk Wiesenthal
QA Contact:	Johannes Keiser

URL:
Keywords:

Duplicates:	47366 (view as bug list)
Depends on:
Blocks:	47846
	Show dependency tree / graph

Reported:	2018-09-20 16:32 CEST by Dirk Wiesenthal
Modified:	2019-03-16 19:26 CET (History)
CC List:	2 users (show)

See Also:	48390
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	5: Will affect all installed domains
How will those affected feel about the bug?:	1: Nuisance – not a big deal but noticeable
User Pain:	0.057
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dirk Wiesenthal

2018-09-20 16:32:11 CEST

We should add a diagnostic plugin that scans through all LDAP objects and identifies those that lack "univentionObjectType" but seem to be some sort of  "univention object".

Also we should provide a one-click solution to add these object types.

Comment 1 Dirk Wiesenthal

2018-09-20 16:39:32 CEST

This is important for some services to use convenient LDAP filters. Currently, the LDAP filter for users/user looks obscure and may even change at some point.

Added in
  univention-management-console-module-diagnostic 4.0.1-1A~4.3.0.201809201635

objects beneath cn=temporary,cn=univention,$ldap_base are ignored.

Also check performance issues with this new plugin. I had none.

Comment 2 Ole Schwiegert

2018-09-26 12:18:58 CEST

Changelog & Advisories: OK

Tested mainly with users, but also other univention objects like computer, portals etc. The module worked fine and migrated the objects.

The performance was tested with 8000 users, containing 700|2000 malformed users.

Comment 3 Ole Schwiegert

2018-09-26 12:41:13 CEST

As Juern figured out 81_diagnostic_checks fails:
http://jenkins.knut.univention.de:8080/job/UCS-4.3/job/UCS-4.3-2/job/AutotestJoin/lastCompletedBuild/SambaVersion=no-samba,Systemrolle=master/testReport/00_checks/81_diagnostic_checks/test/

Comment 4 Dirk Wiesenthal

2018-10-10 19:03:09 CEST

Fixed by filtering kerberos/kdcentry for now. Should be reverted as soon as Bug#47846 is fixed.

Comment 5 Johannes Keiser

2018-10-11 09:53:15 CEST

(In reply to Dirk Wiesenthal from comment #4)
> Fixed by filtering kerberos/kdcentry for now. Should be reverted as soon as
> Bug#47846 is fixed.

OK: objects of type kerberos/kdcentry are ignored
OK: YAML (5f8be4c3b9 typo)
OK: Test
-> verified

Comment 6 Arvid Requate

2018-12-05 14:39:19 CET

<http://errata.software-univention.de/ucs/4.3/352.html>

Comment 7 Daniel Tröder

2019-02-11 12:47:06 CET

*** Bug 47366 has been marked as a duplicate of this bug. ***