Description Stefan Gohmann 2016-09-01 06:16:49 CEST

The DC Master object is rejected on a School DC:
-------------------------------------------------------------------------------
31.08.2016 09:48:53,451 LDAP        (PROCESS): sync from ucs: [            dc] [       add] cn=master300,ou=domain controllers,DC=autotest300,DC=local
31.08.2016 09:48:53,485 LDAP        (PROCESS): sync_from_ucs: error during add, searching for conflicting deleted object in S4
31.08.2016 09:48:53,486 LDAP        (PROCESS): sync_from_ucs: no conflicting deleted object found
31.08.2016 09:48:53,517 LDAP        (WARNING): sync failed, saved as rejected
	/var/lib/univention-connector/s4/1472650900.474546
31.08.2016 09:48:53,519 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 805, in __sync_file_from_ucs
    or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2424, in sync_from_ucs
    self.lo_s4.lo.add_ext_s(compatible_modstring(object['dn']), compatible_addlist(addlist), serverctrls=ctrls) #FIXME encoding
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 187, in add_ext_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
ALREADY_EXISTS: {'info': '00002071: ../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=master300,OU=Domain Controllers,DC=autotest300,DC=local - ../ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=master300,OU=Domain Controllers,DC=autotest300,DC=local', 'desc': 'Already exists'}
-------------------------------------------------------------------------------

I guess it depends on the installation order.

Test result:
http://jenkins.knut.univention.de:8080/job/UCSschool%204.1/job/UCSschool%204.1%20(R2)%20Large%20Environment/10/testReport/slave300-s1.00_checks/10_s4_connector_rejects/slave300_s1_test/