Bug 52208 – No synchronisation of mail/mailPrimaryAddress to UCS LDAP from AD anymore

Bug 52208 - No synchronisation of mail/mailPrimaryAddress to UCS LDAP from AD anymore


Summary:	No synchronisation of mail/mailPrimaryAddress to UCS LDAP from AD anymore

Status:	RESOLVED INVALID

Product:	UCS
Classification:	Unclassified
Component:	AD Connector
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Samba maintainers
QA Contact:	Samba maintainers

URL:
Keywords:

Depends on:	37289 51647
Blocks:
	Show dependency tree / graph

Reported:	2020-10-12 13:38 CEST by Dirk Schnick
Modified:	2020-10-20 23:27 CEST (History)
CC List:	9 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	3: Will affect average number of installed domains
How will those affected feel about the bug?:	3: A User would likely not purchase the product
User Pain:	0.257
Enterprise Customer affected?:	Yes
School Customer affected?:
ISV affected?:
Waiting Support:	Yes
Flags outvoted (downgraded) after PO Review:
Ticket number:	2020100221000338
Bug group (optional):	Regression
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dirk Schnick

2020-10-12 13:38:34 CEST

+++ This bug was initially created as a clone of Bug #51647 +++

Latest UCS 4.4-4 does not sync mail-Attribute from AD to local UCS LDAP anymore.

However a change in AD to the mail-attribute is noticed.

UCS is member server in server 2016 windows AD. AD-sync works but local UCS ldap does not show attribute mailPrimaryAddress even though connector logs a change. 

I set mustermann@customerdomain.de in field E-Mail in AD. Domain is set in UCS:
mail/hosteddomains: customerdomain.de customer.local

If i change users mail-addy in AD, connector.log even shows:

    LDAP (PROCESS): sync to ucs: [ user] [ modify] uid=mustermann,cn=users,dc=CUSTOMER,dc=local

So it’s noticed, but not written to LDAP:

univention-ldapsearch uid=mustermann

does not show any attribute with mail (not mail, not mailPrimaryAddress).

Reported to forum: https://help.univention.com/t/mailprimaryaddress-not-synced-to-local-ldap-from-activedirectory/15560

Comment 1 Dirk Schnick

2020-10-12 14:24:08 CEST

As reported by a community member in Bug #51647 and a customer in attached ticket, the problem also occurs with a relatively recent system (4.4-6 errata750 and UCS: 4.4-6 errata758, Installed: adconnector=12.0)

The customer reported the problem in August and waits for a solution.

Comment 2 Arvid Requate

2020-10-14 20:47:37 CEST

I can't find a log file or USI attached to Ticket 2020100221000338.
A connector.log would be good, ideally from setting connector/debug/level=4 and reproducing the problem.

Comment 4 Arvid Requate

2020-10-20 23:27:10 CEST

I'm not sure if  that connector.log is meaningful, it repeatedly shows a traceback for the test user:

File "/usr/lib/python2.7/dist-packages/univention/admin/hooks.d/oxAccess.py", line 113, in check_displayname
   raise univention.admin.uexceptions.valueError(oxAccess._('OX Display name "%s" is already in use.') % oxDisplayName)