Univention Bugzilla – Bug 48078
Portal entries disappear completely on upgraded systems when restricted to a certain group
Last modified: 2019-06-26 15:11:06 CEST
root@master:~# univention-app info UCS: 4.3-2 errata291 Installed: dhcp-server=12.0 samba4=4.7 self-service=3.0 ucsschool=4.3 v5 Upgradable: How to reproduce: Restrict the portal entry "server-overview" to the group "Domain Admins". Observed behaviour: The portal entry "server-overview" is not shown in the portal, although I am logged in as member of "Domain Admins". Expected behaviour: The portal entry "server-overview" is only shown on the portal for logged in members of "Domain Admins".
I have to expand this: - It is not restricted to "server-overview", but affects all restricted portal entries - I can only reproduce this on systems that were upgraded from 4.x to 4.3 - It's working fine for systems which were installed with 4.3
Another customer is affected by this. Increased to key scenario because educative environments with portal entries restricted to e.g. several different schools are key scenarios IMO.
Just for completeness: On the affected systems, the memberOf overlay was activated as described in https://help.univention.com/t/6439 and works fine: root@master:~# univention-ldapsearch -LLL uid=grandjean memberOf dn: uid=grandjean,cn=externe,cn=users,dc=example,dc=org memberOf: cn=Domain Admins,cn=groups,dc=example,dc=org memberOf: cn=Domain Users,cn=groups,dc=example,dc=org memberOf: cn=Printer-Admins,cn=groups,dc=example,dc=org memberOf: cn=schule01-import-all,cn=groups,ou=schule01,dc=example,dc=org Still, the portal entries disappear after restricting them to one of the groups.
My system was affected. But with at least errata 381 the problem disappeared/was solved.
(In reply to Thorsten Strusch from comment #4) > My system was affected. But with at least errata 381 the problem > disappeared/was solved. Thanks for the feedback.