Bug 46450 - Synchronization of administrateur failed
Synchronization of administrateur failed
Status: NEW
Product: UCS
Classification: Unclassified
Component: AD Connector
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
Samba maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-03-01 08:01 CET by Stefan Gohmann
Modified: 2021-05-03 21:34 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
connector.log (1.01 MB, text/plain)
2018-03-01 08:02 CET, Stefan Gohmann
Details
connector.log with debug level 4 (618.55 KB, text/plain)
2018-03-01 10:57 CET, Stefan Gohmann
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2018-03-01 08:01:41 CET
See http://jenkins.knut.univention.de:8080/job/UCS-4.3/job/UCS-4.3-0/job/ADConnectorMultiEnv/Version=w2k12r2-france/lastCompletedBuild/testReport/

27.02.2018 17:46:17,171 LDAP        (PROCESS): sync to ucs:   [          user] [       add] uid=Administrateur,cn=users,dc=autotest233,dc=local
27.02.2018 17:46:17,172 LDAP        (WARNING): __set_values: The attributes for lastname have not been removed as it represents a mandatory attribute
27.02.2018 17:46:22,478 LDAP        (PROCESS): sync from ucs: [          user] [       add] cn=administrateur,cn=users,DC=autotest233win,DC=local
27.02.2018 17:46:22,534 LDAP        (WARNING): sync failed, saved as rejected
27.02.2018 17:46:22,534 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/connector/__init__.py", line 781, in __sync_file_from_ucs
    if ((old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, unicode(old_dn, 'utf8'))) or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn))):
  File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 2508, in sync_from_ucs
    f(self, property_type, object)
  File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 126, in disable_user_from_ucs
    return connector.disable_user_from_ucs(key, object)
  File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 2013, in disable_user_from_ucs
    self.lo_ad.lo.modify_s(compatible_modstring(object['dn']), compatible_modlist(modlist))
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 402, in modify_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 503, in result
    resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 507, in result2
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 514, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 521, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)
OTHER: {'info': '0000055B: SysErr: DSID-031A12C8, problem 22 (Invalid argument), data 0\n', 'desc': 'Other (e.g., implementation specific) error'}
Comment 1 Stefan Gohmann univentionstaff 2018-03-01 08:02:04 CET
Created attachment 9422 [details]
connector.log
Comment 2 Stefan Gohmann univentionstaff 2018-03-01 08:04:49 CET
[4.3-0 f4c11df37c] autotest-233-adsync-w2k12r2-france: Activate connector debug while setting up the ad connector (Bug #46450)
Comment 3 Stefan Gohmann univentionstaff 2018-03-01 10:57:06 CET
Created attachment 9424 [details]
connector.log with debug level 4
Comment 4 Stefan Gohmann univentionstaff 2018-03-01 11:01:13 CET
Printing the modlist shows the following:

01.03.2018 05:00:13,848 LDAP        (PROCESS): sync from ucs:   Resync rejected file: /var/lib/univention-connector/ad/1519891830.599947
01.03.2018 05:00:13,860 LDAP        (PROCESS): sync from ucs: [          user] [    modify] cn=administrateur,cn=users,DC=autotest233win,DC=local
01.03.2018 05:00:13,907 LDAP        (PROCESS): modlist: [(2, 'accountExpires', ['9223372036854775807'])]
01.03.2018 05:00:13,912 LDAP        (WARNING): sync failed, saved as rejected
Comment 5 Stefan Gohmann univentionstaff 2018-03-01 13:38:35 CET
It looks like Administrator is by default on the ignorelist.

Please revert the modification of connector/ad/mapping/user/ignorelist in the jenkins cfg file:

[4.3-0 eadc25c669] Ignore Administrateur in this French setup and restart AD connector (Bug #46450)