Bug 36477 - Handle attributes that contain only space characters
Handle attributes that contain only space characters
Status: NEW
Product: UCS
Classification: Unclassified
Component: AD Connector
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-11-06 12:14 CET by Michael Grandjean
Modified: 2020-06-22 18:25 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.006
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2014093021000791
Bug group (optional): Roadmap discussion (moved)
Max CVSS v3 score:


Attachments
connector.log excerpt with traceback (1.41 KB, text/x-log)
2014-11-06 12:14 CET, Michael Grandjean
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Grandjean univentionstaff 2014-11-06 12:14:44 CET
Created attachment 6313 [details]
connector.log excerpt with traceback

If at least one of the following attributes contains only spaces (or only one space character) in AD, the sync will be rejected:
- pager
- homePhone
- mobile
- telephoneNumber
- ... probably more

It is _not_ possible to set those attributes to one or more spaces with the normal GUI-Tool (dsa.msc). Nevertheless, it is possible with tools such as ADSIEdit (adsiedit.msc) and commandline tools. I will attach a connector.log excerpt with the traceback.

Active Directory attribute telephoneNumber:
http://msdn.microsoft.com/en-us/library/ms680027%28v=vs.85%29.aspx
There it says:
> Syntax: String(Unicode)
> A case-insensitive Unicode string.

I can't think of a scenario where having only spaces as telephoneNumber makes sense, but I also think that this should not break the AD-Connector synchronisation.

Reported via Ticket#2014093021000791, verified with UCS 3.2-3 errata 234 and Windows Server 2012 R2.
Comment 1 Stefan Gohmann univentionstaff 2017-06-16 20:36:02 CEST
This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.
Comment 2 Florian Best univentionstaff 2020-06-22 18:25:07 CEST
06.11.2014 11:56:41,592 LDAP        (PROCESS): sync to ucs:   [          user] [    modify] uid=ada,cn=users,dc=shadow,dc=org,dc=tld
06.11.2014 11:56:41,600 LDAP        (ERROR  ): Unknown Exception during sync_to_ucs
06.11.2014 11:56:41,621 LDAP        (ERROR  ): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.6/univention/connector/__init__.py", line 1269, in sync_to_ucs
    result = self.modify_in_ucs(property_type, object, module, position)
  File "/usr/lib/pymodules/python2.6/univention/connector/__init__.py", line 1131, in modify_in_ucs
    return ucs_object.modify() and self.__modify_custom_attributes(property_type, object, ucs_object, module, position)
  File "/usr/lib/pymodules/python2.6/univention/admin/handlers/__init__.py", line 364, in modify
    return self._modify(modify_childs,ignore_license=ignore_license)
  File "/usr/lib/pymodules/python2.6/univention/admin/handlers/__init__.py", line 943, in _modify
    self.lo.modify(self.dn, ml, ignore_license=ignore_license)
  File "/usr/lib/pymodules/python2.6/univention/admin/uldap.py", line 419, in modify
    raise univention.admin.uexceptions.ldapError, _err2str(msg)
ldapError: Invalid syntax: telephoneNumber: value #0 normalization failed

06.11.2014 11:56:41,624 LDAP        (WARNING): sync to ucs was not successfull, save rejected
06.11.2014 11:56:41,625 LDAP        (WARNING): object was: CN=Ada Lovelace,CN=Users,DC=DomA1,DC=org,DC=tld