Bug 51341 - Backport 4.3: memberOf differences between master and backup in slapcat output
Backport 4.3: memberOf differences between master and backup in slapcat output
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 4.3
Other Linux
: P5 normal (vote)
: UCS 4.3-5-errata
Assigned To: Sönke Schwardt-Krummrich
Florian Best
:
Depends on: 46590
Blocks:
  Show dependency treegraph
 
Reported: 2020-05-20 12:56 CEST by Sönke Schwardt-Krummrich
Modified: 2020-06-03 12:57 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 5: Will affect all installed domains
How will those affected feel about the bug?: 4: A User would return the product
User Pain: 0.343
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2020-05-20 12:56:50 CEST
This fix should be backported to UCS 4.3-5.

+++ This bug was initially created as a clone of Bug #46590 +++

After comparing slapcat on the master and the backup (of a setup with two DC slaves) with diff-ldif I got the following diff:

https://pastebin.knut.univention.de/WATiXDm9

UCS@school 4.3
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2020-05-24 22:30:42 CEST
Backported commits to errata 4.3-5:
[4.3-5] 43631f226b Bug #51341: add changelog entry
[4.3-5] 8a3040d8ea Bug #51341: wait_for does not exist in UCS 4.3
[4.3-5] aadf10e14c Bug #51341: add 10_ldap/42replication_memberof
[4.3-5] e4ce692bde Bug #51351: add advisory
[4.3-5] 39c874d777 Bug #51341: add changelog entry
[4.3-5] 09573095aa Bug #51341: replication.py: fix memberOf handling

Package: univention-directory-replication
Version: 11.0.0-9A~4.3.0.202005242228
Branch: ucs_4.3-0
Scope: errata4.3-5
Comment 2 Sönke Schwardt-Krummrich univentionstaff 2020-05-26 15:28:43 CEST
Package: ucs-test
Version: 8.0.30-5A~4.3.0.202005261528
Branch: ucs_4.3-0
Scope: errata4.3-5
Comment 3 Florian Best univentionstaff 2020-05-27 21:48:43 CEST
The test case is failing. Please either backport the retry_count or remove it.

(2020-05-27 10:31:21.948336) Traceback (most recent call last):
(2020-05-27 10:31:21.948460)   File "42replication_memberof", line 275, in <module>
(2020-05-27 10:31:21.948592)     testcases.run()
(2020-05-27 10:31:21.948636)   File "42replication_memberof", line 264, in run
(2020-05-27 10:31:21.948751)     func(with_listener)
(2020-05-27 10:31:21.948791)   File "42replication_memberof", line 113, in test_user_then_group
(2020-05-27 10:31:21.948871)     utils.verify_ldap_object(dn_grp1, {'uniqueMember': [dn_user1, dn_user2]}, strict=True, retry_count=RETRY_COUNT, delay=DELAY)
(2020-05-27 10:31:21.948994) TypeError: verify_ldap_object() got an unexpected keyword argument 'retry_count'
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2020-05-28 19:59:37 CEST
For simplicity I removed the retry_count and tested manually on my 4.3 machine.
Looked good on that machine, let's hope the best for the jenkins tests.

[4.3-5] 27dcd7dc84 Bug #51341: add changelog entry
[4.3-5] fab0a716ab Bug #51341: udm.modify_object() does not return the new DN
[4.3-5] 399dcd67ce Bug #51341: remove UCS 4.4 features in 10_ldap/42replication_memberof

Package: ucs-test
Version: 8.0.30-6A~4.3.0.202005281758
Branch: ucs_4.3-0
Scope: errata4.3-5
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2020-06-02 21:42:47 CEST
The test shouldn't have been run on that machine because the memberOf overlay is disabled:
https://jenkins.knut.univention.de:8181/job/UCS-4.3/job/UCS-4.3-5/job/AutotestUpgrade/lastCompletedBuild/SambaVersion=s4,Systemrolle=master-part-II/testReport/10_ldap/92_memberOf/

(2020-06-02 10:58:03.505627) + member_of_not_available
(2020-06-02 10:58:03.505849) + grep -i '^memberOf:'
(2020-06-02 10:58:03.507046) + univention-ldapsearch -ALLLL '(&(objectClass=posixAccount)(uid=*))' +
(2020-06-02 10:58:03.816867) + test 1 -eq 0
(2020-06-02 10:58:03.816895) + return 0

The test now skips itself if the overlay is not activated.

Package: ucs-test
Version: 8.0.30-8A~4.3.0.202006022137
Branch: ucs_4.3-0
Scope: errata4.3-5

[4.3-5] fef2a18625 Bug #51341: skip 10_ldap/42replication_memberof if memberOf is disabled
Comment 7 Florian Best univentionstaff 2020-06-03 11:56:34 CEST
OK: backport
OK: ucs-test case
OK: ucs-test case if disabled memberof
OK: YAML
Comment 8 Erik Damrose univentionstaff 2020-06-03 12:57:53 CEST
<http://errata.software-univention.de/ucs/4.3/681.html>