Description Tobias Scherer 2012-06-12 12:20:38 CEST

Berichtet an Ticket#: 2012060721002289

An einem Benutzer wurde im UDM eine Gruppe entfernt. Im ldapsearch ist die Gruppe nicht mehr vorhanden, im s4-search wird sie noch aufgeführt. 

root@master: ~ $ univention-ldapsearch cn=Backup\ Operators
# extended LDIF
#
# LDAPv3
# base <dc=han,dc=solo> (default) with scope subtree
# filter: cn=Backup Operators
# requesting: ALL
#

# Backup Operators, groups, han.solo
dn: cn=Backup Operators,cn=groups,dc=han,dc=solo
objectClass: top
objectClass: posixGroup
objectClass: univentionGroup
objectClass: sambaGroupMapping
objectClass: univentionObject
univentionObjectType: groups/group
cn: Backup Operators
sambaSID: S-1-5-32-551
sambaGroupType: 5
gidNumber: 5017

# search result
search: 3
result: 0 Success

# numResponses:
root@master: ~ $ univention-s4search cn="Backup Operators"
# record 1
dn: CN=Backup Operators,CN=Builtin,DC=han,DC=solo
objectClass: top
objectClass: group
cn: Backup Operators
description: Backup Operators can override security restrictions for the sole 
 purpose of backing up or restoring files
instanceType: 4
whenCreated: 20120611121050.0Z
uSNCreated: 3569
name: Backup Operators
objectGUID: a7f2b909-14ad-41a1-9f83-b99c9a5e90ff
objectSid: S-1-5-32-551
adminCount: 1
sAMAccountName: Backup Operators
sAMAccountType: 536870912
systemFlags: -1946157056
groupType: -2147483643
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=han,DC=solo
isCriticalSystemObject: TRUE
member: CN=Testbenutzer,CN=Users,DC=han,DC=solo
whenChanged: 20120612090407.0Z
uSNChanged: 3749
distinguishedName: CN=Backup Operators,CN=Builtin,DC=han,DC=solo

# Referral
ref: ldap://han.solo/CN=Configuration,DC=han,DC=solo

# returned 2 records
# 1 entries
# 1 referrals

Die letzten Logmeldungen in der connector-s4.log waren von den vorherigen aktionen:
12.06.2012 11:52:41,605 LDAP        (PROCESS): sync to ucs:   [         group] [    modify] cn=domain admins,cn=groups,dc=han,dc=solo
12.06.2012 11:52:41,651 LDAP        (PROCESS): sync to ucs:   [         group] [    modify] cn=domain users,cn=groups,dc=han,dc=solo
12.06.2012 11:54:32,801 LDAP        (PROCESS): sync from ucs: [         group] [    modify] cn=domain admins,cn=groups,dc=han,dc=solo
12.06.2012 11:54:32,817 LDAP        (PROCESS): group_members_sync_from_ucs: CN=ucs-s4sync,CN=Users,DC=han,DC=solo was not found in member cache, don't delete
12.06.2012 11:54:32,894 LDAP        (PROCESS): sync to ucs:   [         group] [    modify] cn=domain admins,cn=groups,dc=han,dc=solo

Am Ticket war im Log noch die folgende Meldung zu sehen:
07.06.2012 15:46:24,364 LDAP        (PROCESS): sync from ucs: [ group] [ modify] cn=domain admins,cn=groups,dc=foo,dc=firma,dc=test
07.06.2012 15:46:24,405 LDAP        (PROCESS): group_members_sync_from_ucs: CN=user,OU=users,OU=Verwaltung,DC=foo,DC=firma,DC=test was not found in member cache, don't delete