Bug 53134 - Add group with email address in UCS -> reject
Add group with email address in UCS -> reject
Status: NEW
Product: UCS
Classification: Unclassified
Component: AD Connector
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-0-errata
Assigned To: Samba maintainers
Samba maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2021-04-22 12:56 CEST by Felix Botner
Modified: 2024-03-20 13:24 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2024032021000168
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Felix Botner univentionstaff 2021-04-22 12:56:05 CEST
UCS <-> AD Connection (sync) <-> AD W2k19

Added group grp1 in UCS with email address grp1@five.test, now i get a reject

2.04.2021 12:51:35.390 LDAP        (PROCESS): sync from ucs: [         group] [       add] cn=grp1,cn=groups,DC=five,DC=test
22.04.2021 12:51:35.397 LDAP        (ERROR  ): sync_from_ucs: traceback during add object: cn=grp1,cn=groups,DC=five,DC=test
22.04.2021 12:51:35.397 LDAP        (ERROR  ): sync_from_ucs: traceback due to addlist: [('objectClass', [b'top', b'group']), ('sAMAccountName', [b'grp1']), ('groupType', [b'-2147483646']), ('proxyAddresses', [b'SMTP:grp1@five.test']), ('proxyAddresses', [b'SMTP:grp1@five.test']), ('mail', [b'grp1@five.test'])]
22.04.2021 12:51:35.404 LDAP        (WARNING): sync failed, saved as rejected
        /var/lib/univention-connector/ad/1619088691.181766
22.04.2021 12:51:35.409 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/connector/__init__.py", line 817, in __sync_file_from_ucs
    if not self.sync_from_ucs(key, mapped_object, pre_mapped_ucs_dn, old_dn, object_old):
  File "/usr/lib/python3/dist-packages/univention/connector/ad/__init__.py", line 2145, in sync_from_ucs
    self.lo_ad.lo.add_ext_s(object['dn'], addlist, serverctrls=ctrls)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1238, in add_ext_s
    return self._apply_method_s(SimpleLDAPObject.add_ext_s,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1197, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 414, in add_ext_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 749, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 756, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 329, in _ldap_call
    reraise(exc_type, exc_value, exc_traceback)
  File "/usr/lib/python3/dist-packages/ldap/compat.py", line 44, in reraise
    raise exc_value
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 313, in _ldap_call
    result = func(*args,**kwargs)
ldap.TYPE_OR_VALUE_EXISTS: {'desc': 'Type or value exists', 'info': '00002083: AtrErr: DSID-031519F7, #1:\n\t0: 00002083: DSID-031519F7, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att 200d2 (proxyAddresses):len 38\n'}


This does NOT happen if i create the group first and then set an email address.
Comment 2 Christina Scheinig univentionstaff 2024-03-20 13:24:17 CET
20.03.2024 11:36:58.190 LDAP        (ERROR  ): sync_from_ucs: traceback due to
addlist: [('objectClass', [b'top', b'group']), ('description', [b'Testgruppe
f\xc3\xbcr AD-Sync']), ('sAMAccountName', [b'group-mail-test']), ('groupType',
[b'-2147483646']), ('proxyAddresses', [b'SMTP:group-mail@group-mail-schein.de']),
('proxyAddresses', [b'SMTP:group-mail-@group-mail-schein.de']), ('mail', [b'group-mail@group-mail-schein.de'])]
20.03.2024 11:36:58.191 LDAP        (WARNING): sync failed, saved as rejected 
        /var/lib/univention-connector/ad/1710928484.830729
20.03.2024 11:36:58.191 LDAP        (WARNING): Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/connector/__init__.py", line 809, in __sync_file_from_ucs
    if not self.sync_from_ucs(key, mapped_object, pre_mapped_ucs_dn, old_dn, object_old):
  File "/usr/lib/python3/dist-packages/univention/connector/ad/__init__.py", line 2105, in sync_from_ucs
    self.lo_ad.lo.add_ext_s(object['dn'], addlist, serverctrls=ctrls)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1238, in add_ext_s
    return self._apply_method_s(SimpleLDAPObject.add_ext_s,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 1197, in _apply_method_s
    return func(self,*args,**kwargs)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 414, in add_ext_s
    resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 749, in result3
    resp_ctrl_classes=resp_ctrl_classes
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 756, in result4
    ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 329, in _ldap_call
    reraise(exc_type, exc_value, exc_traceback)
  File "/usr/lib/python3/dist-packages/ldap/compat.py", line 44, in reraise 
    raise exc_value
  File "/usr/lib/python3/dist-packages/ldap/ldapobject.py", line 313, in _ldap_call
    result = func(*args,**kwargs)
ldap.TYPE_OR_VALUE_EXISTS: {'desc': 'Type or value exists', 'info': '00002083: AtrErr: DSID-03151F00, #1:\n\t0: 00002083: DSID-03151F00, problem 1006
(ATT_OR_VALUE_EXISTS), data 0, Att 200d2 (proxyAddresses):len 40\n'}

The customer also reported, that creating the group first, and after that setting the mailadress works.