Wenn ein neue OU erstellt wird und das AD-Connector den ersten sync durchführt kommt es zu einigen rejects. Weil die Container welche der AD-Connector erstellen will hinter einem Container liegen welche in der ignorelist aufgeführt wird, kommt es zu rejects.

Beispiel:
connector/ad/mapping/container/ignorelist: computers,dhcp,mail,mailinglists,networks,policies,printers,shares,raeume,Builtin,Virtual Machine Manager,System,ucsschool,examusers


univention-connector-list-rejected
    7:   UCS DN: cn=klassen,cn=shares,ou=psly,dc=test,dc=ch
          AD DN: <not found>
         Filename: /var/lib/univention-connector/ad/1482236322.360821

/var/log/univention/connector.log

20.12.2016 13:19:37,555 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/ad/1482236322.360821
20.12.2016 13:19:37,558 LDAP        (PROCESS): sync from ucs: [     container] [       add] cn=klassen,cn=shares,ou=psly,DC=test,DC=lan
20.12.2016 13:19:37,567 LDAP        (WARNING): sync failed, saved as rejected
20.12.2016 13:19:37,568 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/connector/__init__.py", line 733, in __sync_file_from_ucs
    or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn))):
  File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 2341, in sync_from_ucs
    self.lo_ad.lo.add_s(compatible_modstring(object['dn']), compatible_addlist(addlist)) #FIXME encoding
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 202, in add_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 465, in result
    resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 469, in result2
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
NO_SUCH_OBJECT: {'info': "0000208D: NameErr: DSID-03100213, problem 2001 (NO_OBJECT), data 0, best match of:\n\t'OU=psly,DC=test,DC=lan'\n", 'matched': 'OU=psly,DC=test,DC=lan', 'desc': 'No such object'}


Das ganze kann auch bei Gruppen erstellen passieren, wenn dieses Gruppen-Objekt hinter einem Container erstellt werden sollte, welcher in der ignorelist steht.

Momentaner Fix: die entsprechenden reject Files löschen und den ad-connector service restarten.