Description Michael Grandjean 2015-03-17 10:09:16 CET

Via Ticket#2014112021000242, I came across the following tracebacks on a UCS@school DC Slave (Samba 4, UCS 4.0-1, latest errata). They occur while trying to sync GPOs from UCS:

> 16.03.2015 15:04:20,99 MAIN        (------ ): DEBUG_INIT
> 16.03.2015 15:04:54,852 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/s4/1424948384.769969
> 16.03.2015 15:04:54,854 LDAP        (PROCESS): sync from ucs: [         msGPO] [    modify] cn={5a5cffd4-5bf6-45b3-848c-7be214c97e30},cn=policies,cn=system,DC=schulen,DC=local
> 16.03.2015 15:04:54,856 LDAP        (ERROR  ): sync_from_ucs: traceback during modify object: cn={5a5cffd4-5bf6-45b3-848c-7be214c97e30},cn=policies,cn=system,DC=schulen,DC=local
> 16.03.2015 15:04:54,856 LDAP        (ERROR  ): sync_from_ucs: traceback due to modlist: [(0, 'versionNumber', set([u'2228225']))]
> 16.03.2015 15:04:54,858 LDAP        (WARNING): sync failed, saved as rejected
> 	/var/lib/univention-connector/s4/1424948384.769969
> 16.03.2015 15:04:54,859 LDAP        (WARNING): Traceback (most recent call last):
>   File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 801, in __sync_file_from_ucs
>     or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
>   File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2517, in sync_from_ucs
>     self.lo_s4.lo.modify_ext_s(compatible_modstring(object['dn']), compatible_modlist(modlist), serverctrls=self.serverctrls_for_add_and_modify)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 336, in modify_ext_s
>     resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
>     resp_ctrl_classes=resp_ctrl_classes
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
>     ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
>     result = func(*args,**kwargs)
> TYPE_OR_VALUE_EXISTS: {'info': '0000200D: SINGLE-VALUE attribute versionNumber on CN={5A5CFFD4-5BF6-45B3-848C-7BE214C97E30},CN=Policies,CN=System,DC=schulen,DC=local specified more than once', 'desc': 'Type or value exists'}
> 
> 16.03.2015 15:04:54,859 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/s4/1424948424.326668
> 16.03.2015 15:04:54,860 LDAP        (PROCESS): sync from ucs: [         msGPO] [    modify] cn={bc5c9322-a6a6-4276-9e8a-34e6b186a08b},cn=policies,cn=system,DC=schulen,DC=local
> 16.03.2015 15:04:54,862 LDAP        (ERROR  ): sync_from_ucs: traceback during modify object: cn={bc5c9322-a6a6-4276-9e8a-34e6b186a08b},cn=policies,cn=system,DC=schulen,DC=local
> 16.03.2015 15:04:54,862 LDAP        (ERROR  ): sync_from_ucs: traceback due to modlist: [(0, 'gPCUserExtensionNames', set([u'[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}]'])), (0, 'versionNumber', set([u'65536']))]
> 16.03.2015 15:04:54,868 LDAP        (WARNING): sync failed, saved as rejected
> 	/var/lib/univention-connector/s4/1424948424.326668
> 16.03.2015 15:04:54,868 LDAP        (WARNING): Traceback (most recent call last):
>   File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 801, in __sync_file_from_ucs
>     or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
>   File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2517, in sync_from_ucs
>    self.lo_s4.lo.modify_ext_s(compatible_modstring(object['dn']), compatible_modlist(modlist), serverctrls=self.serverctrls_for_add_and_modify)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 336, in modify_ext_s
>     resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
>     resp_ctrl_classes=resp_ctrl_classes
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
>     ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
>   File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
>     result = func(*args,**kwargs)
> TYPE_OR_VALUE_EXISTS: {'info': '0000200D: SINGLE-VALUE attribute gPCUserExtensionNames on CN={BC5C9322-A6A6-4276-9E8A-34E6B186A08B},CN=Policies,CN=System,DC=schulen,DC=local specified more than once', 'desc': 'Type or value exists'}

I will try to get more information on the affected GPOs.