Description Arvid Requate 2025-10-24 13:39:57 CEST

A sAMAccountName change doesn't update `DN Mapped CON` cache and then a subsequent change of CN (leading to a modrdn DN change in AD) causes a traceback in the connector-ad.log, because the connector doesn't find the cached `olddn` (AD-DN mapped to UCS-DN) because it doesn't match reality any more. But even during the first step there's already a traceback, because the `post_ucs_modify_functions` can't find the object any longer using `ucs_object['dn']`:

===
23.10.2025 17:29:39.685 LDAP        (INFO   ): object_from_element: olddn: CN=oster hase,CN=Users,DC=ad,DC=test
[...]
23.10.2025 17:29:39.690 LDAP        (INFO   ): The following attributes have been changed: ['whenChanged', 'uSNChanged', 'sAMAccountName', 'userPrincipalName', 'msDS-RevealedDSAs']
23.10.2025 17:29:39.692 LDAP        (INFO   ): get_ucs_object: object found: uid=oster.hase,cn=users,dc=ucs,dc=test
23.10.2025 17:29:39.692 LDAP        (PROCESS): sync to ucs:   [          user] [    modify] uid=oster.hase,cn=users,dc=ucs,dc=test
[...]
23.10.2025 17:29:39.745 LDAP        (INFO   ): Call post_ucs_modify_functions: <function password_sync at 0x7ff333dfaf28>
[...]
23.10.2025 17:29:39.750 LDAP        (ERROR  ): Unknown Exception during sync_to_ucs
[...]
ldap.NO_SUCH_OBJECT: {'desc': 'No such object', 'matched': 'cn=users,dc=ucs,dc=test'}

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/univention/connector/__init__.py", line 1463, in sync_to_ucs
    post_ucs_modify_function(self, property_type, object)
  File "/usr/lib/python3/dist-packages/univention/connector/ad/password.py", line 487, in password_sync
    ucs_result = connector.lo.search(base=ucs_object['dn'], attr=['sambaPwdLastSet', 'sambaNTPassword', 'krb5PrincipalName', 'krb5Key', 'shadowLastChange', 'shadowMax', 'krb5PasswordEnd', 'pwhistory'])
  File "/usr/lib/python3/dist-packages/univention/admin/uldap.py", line 672, in search
    raise univention.admin.uexceptions.noObject(_err2str(msg))
univention.admin.uexceptions.noObject: No such object.
===