Bug 45226 - AD-Connector: Rejects for non-ascii accounts are not handled properly due to sqlite encoding problem
AD-Connector: Rejects for non-ascii accounts are not handled properly due to ...
Status: CLOSED DUPLICATE of bug 45779
Product: UCS
Classification: Unclassified
Component: AD Connector
UCS 4.2
Other Linux
: P5 normal (vote)
: UCS 4.3-0-errata
Assigned To: Felix Botner
Arvid Requate
:
Depends on: 44369
Blocks: 44291
  Show dependency treegraph
 
Reported: 2017-08-21 12:46 CEST by Felix Botner
Modified: 2018-06-27 08:25 CEST (History)
5 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Felix Botner univentionstaff 2017-08-21 12:46:46 CEST
+++ This bug was initially created as a clone of Bug #44369 +++

We should also fix this in UCS 4.2


+++ This bug was initially created as a clone of Bug #44291 +++

If there is a reject for a DN containing non-ascii characters, then the reject cannot be saved into the corresponding sqlite database table. As a result it's not shown as reject and the S4-Connector is contantly trying to sync that object, spamming the s4-cconector.log:


========================================================================
03.05.2016 01:33:13,727 LDAP        (PROCESS): sync from ucs: [         group] [       add] cn=Domänen Gruppe,cn=groups,DC=ar41i2,DC=qa
03.05.2016 01:33:13,754 LDAP        (ERROR  ): sync_from_ucs: traceback during add object: cn=Domänen Gruppe,cn=groups,DC=ar41i2,DC=qa
03.05.2016 01:33:13,754 LDAP        (ERROR  ): sync_from_ucs: traceback due to addlist: [('objectClass', ['top', 'group']), ('groupType', [u'-2147483646']), ('sAMAccountName', [u'Dom\xe4nen Gruppe'])]
03.05.2016 01:33:13,754 LDAP        (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
03.05.2016 01:33:13,755 LDAP        (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
03.05.2016 01:33:13,756 LDAP        (WARNING): sync failed, saved as rejected
        /var/lib/univention-connector/s4/1462231951.138939
========================================================================


+++ This bug was initially created as a clone of Bug #44276 +++
Comment 1 Florian Best univentionstaff 2017-08-21 12:50:42 CEST
What is the clone for?
Comment 2 Lukas Oyen univentionstaff 2017-08-21 12:58:05 CEST
(In reply to Florian Best from comment #1)
> What is the clone for?

Previously S4-Connector. Now AD-Connector.
Comment 3 Stefan Gohmann univentionstaff 2018-03-15 06:24:53 CET
Move to 4.3-0-errata. If a UCS 4.2 backport is needed, please clone this issue.
Comment 4 Felix Botner univentionstaff 2018-05-08 14:23:34 CEST
fixed with #45779

*** This bug has been marked as a duplicate of bug 45779 ***
Comment 5 Stefan Gohmann univentionstaff 2018-06-27 08:25:49 CEST
Nothing to release.