Univention Bugzilla – Bug 36101
S4-Connector tracebacks due to new _ldap._tcp.DomainDnsZones records.
Last modified: 2016-06-07 20:29:10 CEST
Samba 4.2 creates additional SRV records in DNS, which are not accepted by the UDM syntax class ipProtocolSRV. This causes rejects in the S4-Connector: ============================================================================== root@master50:~# univention-s4connector-list-rejected UCS rejected S4 rejected 1: S4 DN: DC=_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones,DC=ar40i1.qa,CN=MicrosoftDNS,CN=System,DC=ar40i1,DC=qa UCS DN: <not found> 2: S4 DN: DC=_ldap._tcp.ForestDnsZones,DC=ar40i1.qa,CN=MicrosoftDNS,CN=System,DC=ar40i1,DC=qa UCS DN: <not found> 3: S4 DN: DC=_ldap._tcp.DomainDnsZones,DC=ar40i1.qa,CN=MicrosoftDNS,CN=System,DC=ar40i1,DC=qa UCS DN: <not found> 4: S4 DN: DC=_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones,DC=ar40i1.qa,CN=MicrosoftDNS,CN=System,DC=ar40i1,DC=qa UCS DN: <not found> ============================================================================== Can't find the MS docs where these are specified but apparently that's what Active Directroy creates. Note the "DomainDnsZones" and "ForestDnsZones" parts in the DNS names (these are not to be confused with the equally named LDAP partitions in the Samba4/AD Directory Service). +++ This bug was initially created as a clone of Bug #35319 +++
Created attachment 6150 [details] ipProtocolSRV_syntax.patch patch to fix this.
Fixed.
Initial Add (to ucs) works [ dns] [add] DC=_ldap._tcp._DomainDnsZones,dc=w2k12.test,cn=dns,dc=w2k12,dc=test [ dns] [add] DC=DomainDnsZones,dc=w2k12.test,cn=dns,dc=w2k12,dc=test [ dns] [add] DC=ForestDnsZones,dc=w2k12.test,cn=dns,dc=w2k12,dc=test [ user] [modify] cn=test3,dc=w2k12,dc=test and the udm objects are created udm dns/srv_record list --superordinate="zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test"| grep 'DN:.*DomainDns\|DN:.*ForestDns' DN: relativeDomainName=_ldap._tcp._DomainDnsZones,zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test DN: relativeDomainName=_ldap._tcp.Default-First-Site-Name._sites._DomainDnsZones,zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test DN: relativeDomainName=_ldap._tcp._ForestDnsZones,zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test DN: relativeDomainName=_ldap._tcp.Default-First-Site-Name._sites._ForestDnsZones,zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test But next modification in s4 results in and "add to ucs" and fails: 31.10.2014 02:56:48,237 LDAP (PROCESS): sync to ucs: Resync rejected dn: DC=_ldap._tcp.ForestDnsZones,DC=w2k12.test,CN=MicrosoftDNS,CN=System,DC=w2k12,DC=test 31.10.2014 02:56:48,240 LDAP (PROCESS): sync to ucs: [ dns] [ add] DC=_ldap._tcp.ForestDnsZones,dc=w2k12.test,cn=dns,dc=w2k12,dc=test 31.10.2014 02:56:48,253 LDAP (ERROR ): Unknown Exception during sync_to_ucs 31.10.2014 02:56:48,253 LDAP (ERROR ): Traceback (most recent call last): File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 1394, in sync_to_ucs result = self.property[property_type].ucs_sync_function(self, property_type, object) File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/dns.py", line 964, in con2ucs ucs_srv_record_create(s4connector, object) File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/dns.py", line 667, in ucs_srv_record_create newRecord.create() File "/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.py", line 352, in create return self._create() File "/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.py", line 776, in _create self.lo.add(self.dn, al) File "/usr/lib/pymodules/python2.7/univention/admin/uldap.py", line 392, in add raise univention.admin.uexceptions.objectExists, dn objectExists: relativeDomainName=_ldap._tcp._ForestDnsZones,zoneName=w2k12.test,cn=dns,dc=w2k12,dc=test
Created attachment 6275 [details] connector-s4.log
Good point! The S4-Connector implemented its own idea of SRV record parsing, trying to mimic what UDM expects. I now changed that to actually use the univention.handlers.src_record.unmapName method instead.
OK - connector OK - changelof
UCS 4.0-0 has been released: http://docs.univention.de/release-notes-4.0-0-en.html http://docs.univention.de/release-notes-4.0-0-de.html If this error occurs again, please use "Clone This Bug".