Problem:
A school-dc is shown in OPSI-management
Investigation:
The school dc has more attributes as “normal”
(extract)
univention-ldapsearch cn=slave-02
objectClass: ucsschoolComputer
objectClass: univentionWindows
ucsschoolRole: dc_slave_edu:school:sun
ucsschoolRole: win_computer:school:sun
Solution:
You can remove these ucsschoolRole with:
root@master:~# udm computers/domaincontroller_slave modify --dn 'cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me' --remove ucsschoolRole='win_computer:s
Object modified: cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me
root@master:~# ldapmodify -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret <<EOR
> dn: cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me
> changetype: modify
> delete: objectClass
> objectClass: univentionWindows
> EOR
modifying entry "cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me"
root@master:~# ldapmodify -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret <<EOR
> dn: cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me
> changetype: modify
> delete: objectClass
> objectClass: ucsschoolComputer
> EOR
modifying entry "cn=slave-02,cn=dc,cn=server,cn=computers,ou=sun,dc=schein,dc=me"