Bug 47349 - UCS@school: S4-Connector traceback after creating a 'local' AD group (adGroupType=-2147483643) via UDM
UCS@school: S4-Connector traceback after creating a 'local' AD group (adGroup...
Status: REOPENED
Product: UCS@school
Classification: Unclassified
Component: Samba 4
UCS@school 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: Samba maintainers
:
Depends on:
Blocks: 47350
  Show dependency treegraph
 
Reported: 2018-07-12 13:47 CEST by Jürn Brodersen
Modified: 2023-06-12 15:34 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.137
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jürn Brodersen univentionstaff 2018-07-12 13:47:28 CEST
Creating a local ad group (adGroupType=-2147483643) through udm produces s4-connector tracebacks

How to reproduce:
udm groups/group create --position cn=groups,dc=univention,dc=intranet --set name=foob --set adGroupType=-2147483643

Log:
12.07.2018 13:45:05,615 LDAP        (PROCESS): sync from ucs: [         group] [       add] cn=foob,cn=groups,DC=univ
ention,DC=intranet
12.07.2018 13:45:05,620 LDAP        (ERROR  ): sync_from_ucs: traceback during add object: cn=foob,cn=groups,DC=unive
ntion,DC=intranet
12.07.2018 13:45:05,621 LDAP        (ERROR  ): sync_from_ucs: traceback due to addlist: [('objectClass', ['top', 'gro
up']), ('groupType', [u'-2147483643']), ('objectSid', ['\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00\x9d1\x00\x00'])
, ('sAMAccountName', [u'foob']), ('objectSid', ['\x01\x02\x00\x00\x00\x00\x00\x05 \x00\x00\x00\x9d1\x00\x00'])]
12.07.2018 13:45:05,623 LDAP        (WARNING): sync failed, saved as rejected   
        /var/lib/univention-connector/s4/1531395625.578943                      
12.07.2018 13:45:05,623 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 898, in __sync_file_from_ucs
    if ((old_dn and not self.sync_from_ucs(key, mapped_object, pre_mapped_ucs_dn, unicode(old_dn, 'utf8'), old, new))
 or (not old_dn and not self.sync_from_ucs(key, mapped_object, pre_mapped_ucs_dn, old_dn, old, new))):
  File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 2550, in sync_from_ucs
    self.lo_s4.lo.add_ext_s(compatible_modstring(object['dn']), compatible_addlist(addlist), serverctrls=ctrls)  # FI
XME encoding
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 195, in add_ext_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 514, in result3
    resp_ctrl_classes=resp_ctrl_classes                                         
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 521, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
    result = func(*args,**kwargs)                                               
CONSTRAINT_VIOLATION: {'info': '0000202F: SINGLE-VALUE attribute objectSid on CN=foob,CN=Groups,DC=univention,DC=intr
anet specified more than once', 'desc': 'Constraint violation'}
Comment 1 Florian Best univentionstaff 2019-03-15 22:32:10 CET
This happens only in UCS@school?
Comment 2 Arvid Requate univentionstaff 2019-03-18 15:39:55 CET
Works with non-school UCS 4.3-3 errata448
Comment 3 Jan-Luca Kiok univentionstaff 2023-06-12 15:32:11 CEST
This issue has been filed against UCS@school 4.3 or earlier.

UCS 4.3 is out of maintenance and UCS components have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.