Bug 34449 - delete protected attribute 'groupType'
delete protected attribute 'groupType'
Status: RESOLVED WONTFIX
Product: UCS
Classification: Unclassified
Component: S4 Connector
UCS 3.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: Connector maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-04-03 14:03 CEST by Philipp Hahn
Modified: 2017-08-08 07:10 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2014-04-03 14:03:45 CEST
# tail /var/log/univention/connector-s4.log
13:59:22,49 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/s4/1384888309.962315
13:59:22,58 LDAP        (PROCESS): sync from ucs: [         group] [       add] cn=slave join,cn=groups,dc=phahn,dc=dev
13:59:22,62 LDAP        (ERROR  ): sync_from_ucs: traceback during modify object: cn=slave join,cn=groups,dc=phahn,dc=dev
13:59:22,63 LDAP        (ERROR  ): sync_from_ucs: traceback due to modlist: [(1, 'groupType', None)]
13:59:22,215 LDAP        (WARNING): sync failed, saved as rejected
        /var/lib/univention-connector/s4/1384888309.962315
13:59:22,216 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.6/univention/s4connector/__init__.py", line 753, in __sync_file_from_ucs
    or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old))):
  File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2435, in sync_from_ucs
    self.lo_s4.lo.modify_ext_s(compatible_modstring(object['dn']), compatible_modlist(modlist), serverctrls=self.serverctrls_for_add_and_modify)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 808, in modify_ext_s
    return self._apply_method_s(SimpleLDAPObject.modify_ext_s,*args,**kwargs)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 766, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 295, in modify_ext_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 422, in result
    res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 426, in result2
    res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 432, in result3
    ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)
  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 96, in _ldap_call
    result = func(*args,**kwargs)
UNWILLING_TO_PERFORM: {'info': "00002035: objectclass_attrs: delete protected attribute 'groupType' on entry 'CN=Slave Join,CN=Groups,DC=phahn,DC=dev' missing!", 'desc': 'Server is unwilling to perform'}

# univention-ldapsearch -xLLLb "cn=slave join,cn=groups,dc=phahn,dc=dev"
dn: cn=Slave Join,cn=groups,dc=phahn,dc=dev
sambaGroupType: 2
cn: Slave Join
objectClass: top
objectClass: posixGroup
objectClass: univentionGroup
objectClass: sambaGroupMapping
objectClass: univentionObject
univentionObjectType: groups/group
gidNumber: 5009
description: Group for joining domain controller slave servers
uniqueMember: uid=join-backup,cn=users,dc=phahn,dc=dev
uniqueMember: uid=join-slave,cn=users,dc=phahn,dc=dev
memberUid: join-backup
memberUid: join-slave
univentionGroupType: -2147483646
sambaSID: S-1-5-21-3363018838-3564614092-1396302719-1108

# ldbsearch -H /var/lib/samba/private/sam.ldb -b "cn=slave join,cn=groups,dc=phahn,dc=dev"
# record 1
dn: CN=Slave Join,CN=Groups,DC=phahn,DC=dev
objectClass: top
objectClass: group
cn: Slave Join
description: Group for joining domain controller slave servers
instanceType: 4
whenCreated: 20131119191908.0Z
uSNCreated: 3742
name: Slave Join
objectGUID: fd2fc624-6d4b-4ff1-85a7-cbcf1e79a1bb
objectSid: S-1-5-21-3363018838-3564614092-1396302719-1108
sAMAccountName: Slave Join
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=phahn,DC=dev
member: CN=join-backup,CN=Users,DC=phahn,DC=dev
whenChanged: 20131122180841.0Z
uSNChanged: 3878
distinguishedName: CN=Slave Join,CN=Groups,DC=phahn,DC=dev
Comment 1 Stefan Gohmann univentionstaff 2014-04-07 21:13:02 CEST
Do you have more informations about this system? How was it installed? Was it updated?
Comment 2 Philipp Hahn univentionstaff 2014-04-08 08:19:15 CEST
(In reply to Stefan Gohmann from comment #1)
> Do you have more information about this system? How was it installed? Was
> it updated?

Installed with UCS-3.0 around January 2013, initially without Samba4, which was installed only later on.
Updated a lot with several interim versions directly from omar.
Had also seen several runs of ucs-test, were Bug #33621 happened multiple times.
Feel free to have a look yourself: xen12.knut.univention.de
Comment 3 Stefan Gohmann univentionstaff 2017-06-16 20:40:12 CEST
This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.
Comment 4 Stefan Gohmann univentionstaff 2017-08-08 07:10:45 CEST
This issue has been filed against UCS 3.2.

UCS 3.2 is out of maintenance and many UCS components have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.