Bug 45226

Summary: AD-Connector: Rejects for non-ascii accounts are not handled properly due to sqlite encoding problem
Product: UCS Reporter: Felix Botner <botner>
Component: AD ConnectorAssignee: Felix Botner <botner>
Status: CLOSED DUPLICATE QA Contact: Arvid Requate <requate>
Severity: normal    
Priority: P5 CC: best, botner, gohmann, oyen, requate
Version: UCS 4.2   
Target Milestone: UCS 4.3-0-errata   
Hardware: Other   
OS: Linux   
What kind of report is it?: Bug Report What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 2: Will only affect a few installed domains How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.069 Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on: 44369    
Bug Blocks: 44291    

Description Felix Botner univentionstaff 2017-08-21 12:46:46 CEST 
+++ This bug was initially created as a clone of Bug #44369 +++

We should also fix this in UCS 4.2


+++ This bug was initially created as a clone of Bug #44291 +++

If there is a reject for a DN containing non-ascii characters, then the reject cannot be saved into the corresponding sqlite database table. As a result it's not shown as reject and the S4-Connector is contantly trying to sync that object, spamming the s4-cconector.log:


========================================================================
03.05.2016 01:33:13,727 LDAP        (PROCESS): sync from ucs: [         group] [       add] cn=Domänen Gruppe,cn=groups,DC=ar41i2,DC=qa
03.05.2016 01:33:13,754 LDAP        (ERROR  ): sync_from_ucs: traceback during add object: cn=Domänen Gruppe,cn=groups,DC=ar41i2,DC=qa
03.05.2016 01:33:13,754 LDAP        (ERROR  ): sync_from_ucs: traceback due to addlist: [('objectClass', ['top', 'group']), ('groupType', [u'-2147483646']), ('sAMAccountName', [u'Dom\xe4nen Gruppe'])]
03.05.2016 01:33:13,754 LDAP        (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
03.05.2016 01:33:13,755 LDAP        (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
03.05.2016 01:33:13,756 LDAP        (WARNING): sync failed, saved as rejected
        /var/lib/univention-connector/s4/1462231951.138939
========================================================================


+++ This bug was initially created as a clone of Bug #44276 +++
Comment 1 Florian Best univentionstaff 2017-08-21 12:50:42 CEST 
What is the clone for?
Comment 2 Lukas Oyen univentionstaff 2017-08-21 12:58:05 CEST 
(In reply to Florian Best from comment #1)
> What is the clone for?

Previously S4-Connector. Now AD-Connector.
Comment 3 Stefan Gohmann univentionstaff 2018-03-15 06:24:53 CET 
Move to 4.3-0-errata. If a UCS 4.2 backport is needed, please clone this issue.
Comment 4 Felix Botner univentionstaff 2018-05-08 14:23:34 CEST 
fixed with #45779

*** This bug has been marked as a duplicate of bug 45779 ***
Comment 5 Stefan Gohmann univentionstaff 2018-06-27 08:25:49 CEST 
Nothing to release.