Univention Bugzilla – Bug 52263
AD-Connector fails sync, missing match filter, but all filter criterias are fulfilled [4.4]
Last modified: 2022-09-08 11:53:49 CEST
univention-app info UCS: 4.4-6 errata776 Installed: adconnector=12.0 itslearning=3.2 self-service=4.0 self-service-backend=4.0 ucs-to-school-transformer=1.3.2 ucsschool=4.4 v7 ucsschool-kelvin-rest-api=1.1.1 Upgradable: ucsschool-kelvin-rest-api AD-Connector is in sync mode Some users are not synced correctly from AD to UCS, because the AD-Connector reports a missing valid match filter, but all mandatory attributes are present (and thousands of other users are synced correctly in this environment). We were not able to detect any differences between rejected users and not rejected users, because they are all created the same way in AD.
Created attachment 10542 [details] bug52263.patch
Adjust sync_to_ucs to only apply the inonre_filter to the old object specifically for the situation of Bug https://forge.univention.org/bugzilla/show_bug.cgi?id=37351 to avoid doing this to user objects as well. univention-ad-connector.yaml d703193ac33a | Bug #52263: Update Advisory e6d818a66b6d | Bug #52263: changelog and advisory univention-ad-connector (13.0.0-68) 216105137f3c | Bug #52263: cleanup code e6d818a66b6d | Bug #52263: changelog and advisory c9c914dbc2d2 | Bug #52263: check it property_type is "windowscomputer" before check _ignore_object Package: univention-ad-connector Version: 13.0.0-68A~4.4.0.202208310742 Branch: ucs_4.4-0 Scope: errata4.4-9
Verified: * Code review * Functional test * No collateral regressions expected for non-updated systems * No documentation update required * Test case would be nice but it's ok for me to not cover this case for UCS 4.4. We'll also forward port to 5.0. * Advisory
<https://errata.software-univention.de/#/?erratum=4.4x1279>