Description Hendrik Peter 2016-09-09 13:34:34 CEST

Created attachment 7994 [details]
Full log file

The S4-Connector rejects the User, if he has 'Account Operators' set as Primary Group.
Related to Bug #42335.


Traceback (connector-s4.log):
07.09.2016 14:26:38,144 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/s4/1473250733.257173
07.09.2016 14:26:38,149 LDAP        (PROCESS): sync from ucs: [          user] [    modify] cn=user3,cn=users,DC=cool-solutions,DC=intranet
07.09.2016 14:26:38,168 LDAP        (ERROR  ): sync_from_ucs: traceback during add object: cn=user3,cn=users,DC=cool-solutions,DC=intranet
07.09.2016 14:26:38,168 LDAP        (ERROR  ): sync_from_ucs: traceback due to addlist: [('objectClass', ['top', 'user', 'person', 'organizationalPerson']), ('sAMAccountName', [u'user3']), (u'displayName', [u'user3']), (u'sn', [u'user3']), ('primaryGroupID', ['548'])]
07.09.2016 14:26:38,177 LDAP        (WARNING): sync failed, saved as rejected
	/var/lib/univention-connector/s4/1473250733.257173
07.09.2016 14:26:38,178 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 805, in __sync_file_from_ucs
    or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2424, in sync_from_ucs
    self.lo_s4.lo.add_ext_s(compatible_modstring(object['dn']), compatible_addlist(addlist), serverctrls=ctrls) #FIXME encoding
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 187, in add_ext_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
UNWILLING_TO_PERFORM: {'info': 'Failed to find primary group with RID 548!', 'desc': 'Server is unwilling to perform'}


User Dump:
uid=user3
DN: uid=user3,cn=users,dc=cool-solutions,dc=intranet
ARG: None
  homedrive: None
  CtxKeyboardLayout: None
  disabled: none
  postcode: None
  CtxWFProfilePath: None
  CtxRASDialin: E
  title: None
  organisation: None
  CtxMaxIdleTime: None
  lastname: user3
  employeeNumber: None
  password: {crypt}$6$ufGNe1.c20nzpxNQ$RwGDN5tRX5FQjlaqM09j/APYueJPUaJILg/nTyXVhtUyiwNXmm7FKY.u8JQxGMl9Fz4/Te39WLz3in.FXv.BP0
  passwordexpiry: None
  sambaRID: 2013
  profilepath: None
  objectFlag: None
  sambahome: None
  CtxWFHomeDirDrive: None
  CtxCallback: None
  street: None
  CtxShadow: 00000000
  CtxWorkDirectory: None
  CtxNWLogonServer: None
  CtxMaxConnectionTime: None
  groups: cn=Account Operators,cn=Builtin,dc=cool-solutions,dc=intranet
  overridePWHistory: None
  country: None
  pwdChangeNextLogin: None
  primaryGroup: cn=Account Operators,cn=Builtin,dc=cool-solutions,dc=intranet
  CtxInitialProgram: None
  scriptpath: None
  city: None
  CtxStartprogramClient: 0
  userexpiry: None
  username: user3
  departmentNumber: None
  shell: /bin/bash
  CtxMinEncryptionLevel: None
  CtxCallbackNumber: None
  mailHomeServer: None
  CtxCfgFlags1: 00000100
  gidNumber: 5055
  sambaLogonHours: None
  CtxBrokenSession: 0000
  locked: none
  CtxReconnectSession: 0000
  roomNumber: None
  homeShare: None
  gecos: user3
  CtxCfgClientPrinters: 0
  jpegPhoto: None
  uidNumber: 2013
  employeeType: None
  homeSharePath: None
  CtxCfgPresent: 551e0bb0
  CtxWFHomeDir: None
  unixhome: /home/user3
  description: None
  firstname: None
  birthday: None
  overridePWLength: None
  CtxMaxDisconnectionTime: None
  CtxCfgDefaultClientPrinters: 0
  displayName: user3
  mailPrimaryAddress: None
  CtxCfgClientDrivers: 0
  CtxCfgTSLogon: 0
  Policy-based Settings:
    Policy: cn=default-users,cn=admin-settings,cn=users,cn=policies,dc=cool-solutions,dc=intranet
    Attribute: univentionAdminMayOverrideSettings
    Value: 0
    Policy: cn=default-users,cn=admin-settings,cn=users,cn=policies,dc=cool-solutions,dc=intranet
    Attribute: univentionAdminListWebModules
    Value: modself
    Policy: cn=default-users,cn=admin-settings,cn=users,cn=policies,dc=cool-solutions,dc=intranet
    Attribute: univentionAdminListWizards
    Value: None
    Policy: cn=default-settings,cn=pwhistory,cn=users,cn=policies,dc=cool-solutions,dc=intranet
    Attribute: univentionPWLength
    Value: 8
    Policy: cn=default-settings,cn=pwhistory,cn=users,cn=policies,dc=cool-solutions,dc=intranet
    Attribute: univentionPWHistoryLen
    Value: 3