This gave me a '>' prompt and wouldn't run. I had to ^C, so I dropped the sed.
root@app1:~# univention-ssh pwdfile Administrator@dc1.erlphase.com /usr/sbin/udm users/user list --filter uid=Administrator --logfile /dev/null
Traceback (most recent call last):
File "/usr/share/univention-directory-manager-tools/univention-cli-server", line 222, in doit
output = univention.admincli.admin.doit(arglist)
File "/usr/lib/pymodules/python2.7/univention/admincli/admin.py", line 404, in doit
out = _doit(arglist)
File "/usr/lib/pymodules/python2.7/univention/admincli/admin.py", line 608, in _doit
univention.admin.modules.init(lo, position, module)
File "/usr/lib/pymodules/python2.7/univention/admin/modules.py", line 135, in init
update_extended_attributes(lo, module, position)
File "/usr/lib/pymodules/python2.7/univention/admin/modules.py", line 297, in update_extended_attributes
propertyHook = getattr(univention.admin.hook, propertyHookString)()
File "/usr/lib/pymodules/python2.7/univention/admin/hooks.d/oxUserDefaults.py", line 59, in __init__
lo, pos = univention.admin.uldap.getMachineConnection()
File "/usr/lib/pymodules/python2.7/univention/admin/uldap.py", line 147, in getMachineConnection
lo = univention.uldap.getMachineConnection(start_tls, decode_ignorelist=decode_ignorelist, ldap_master=ldap_master)
File "/usr/lib/pymodules/python2.7/univention/uldap.py", line 79, in getMachineConnection
bindpw = open(secret_file).read().rstrip('\n')
IOError: [Errno 13] Permission denied: '/etc/machine.secret'
root@app1:~#
I then ran the last command on dc1:
root@dc1:~# /usr/sbin/udm users/user list --filter uid=Administrator
uid=Administrator
DN: uid=Administrator,cn=users,dc=erlphase,dc=com
ARG: None
oxProfession: None
homedrive: None
CtxKeyboardLayout: None
disabled: none
oxCountryBusiness: None
oxUserfield09: None
postcode: None
oxUserfield17: None
oxUserfield05: None
oxUserfield04: None
CtxWFProfilePath: None
oxUserfield06: None
CtxRASDialin: E
oxUserfield14: None
oxUserfield03: None
oxNickName: None
oxAnniversary: None
oxUserfield15: None
title: None
organisation: None
CtxMaxIdleTime: None
oxPosition: None
oxUserfield11: None
oxNote: None
oxFaxHome: None
lastname: Administrator
employeeNumber: None
oxUserfield18: None
oxUserfield19: None
oxUserfield16: None
oxManagerName: None
password: {crypt}$6$PkPO0s8JZcK0UjYR$piDumc.HfsUfTFN5KTVk2IyHdAP7vFHS92BMjjnNP8rzPkdsowgRhkRrLWS.lyiPZwU29EZC3oVNSC0g/F3j.1
oxUserfield12: None
oxUserfield13: None
oxUserfield10: None
oxMiddleName: None
oxStateHome: None
oxBranches: None
oxBirthday: None
passwordexpiry: None
sambaRID: 500
profilepath: None
objectFlag: None
sambahome: None
CtxWFHomeDirDrive: None
oxTimeZone: America/Winnipeg
CtxCallback: None
street: None
CtxShadow: 00000000
oxUserfield20: None
oxUserfield07: None
oxLanguage: en_US
oxCommercialRegister: None
oxMarialStatus: None
oxUserfield01: None
oxStateOther: None
isOxUser: Not
oxPostalCodeHome: None
CtxWorkDirectory: None
CtxNWLogonServer: None
oxUserfield02: None
CtxMaxConnectionTime: None
umcProperty: appcenterSeen = 2
umcProperty: favorites = appcenter:appcenter,updater,apps:dhcp-server
oxDepartment: None
oxFaxOther: None
oxTelephoneOther: None
oxStateBusiness: None
groups: cn=Domain Admins,cn=groups,dc=erlphase,dc=com
groups: cn=Domain Users,cn=groups,dc=erlphase,dc=com
groups: cn=DC Backup Hosts,cn=groups,dc=erlphase,dc=com
groups: cn=Schema Admins,cn=groups,dc=erlphase,dc=com
groups: cn=Enterprise Admins,cn=groups,dc=erlphase,dc=com
groups: cn=Group Policy Creator Owners,cn=groups,dc=erlphase,dc=com
groups: cn=Administrators,cn=Builtin,dc=erlphase,dc=com
oxInstantMessenger1: None
oxInstantMessenger2: None
overridePWHistory: None
oxCountryHome: None
country: None
oxCountryOther: None
oxUrl: None
pwdChangeNextLogin: None
UniventionDovecotUserQuota: None
primaryGroup: cn=Domain Admins,cn=groups,dc=erlphase,dc=com
CtxInitialProgram: None
scriptpath: admin.bat
oxUserfield08: None
oxPostalCodeOther: None
city: None
CtxStartprogramClient: 0
oxEmail2: None
userexpiry: None
oxMobileBusiness: None
oxNumOfChildren: None
oxFaxBusiness: None
username: Administrator
departmentNumber: None
shell: /bin/bash
CtxMinEncryptionLevel: None
CtxCallbackNumber: None
mailHomeServer: None
CtxCfgFlags1: None
gidNumber: 5000
oxCityHome: None
sambaLogonHours: None
CtxBrokenSession: 0000
oxTelephoneAssistant: None
locked: none
CtxReconnectSession: 0000
oxDisplayName: Administrator
roomNumber: None
oxTelephoneCar: None
homeShare: None
gecos: Administrator
oxAccess: none
oxTelephoneTtydd: None
oxTaxId: None
CtxCfgClientPrinters: 0
oxEmail3: None
oxStreetHome: None
jpegPhoto: None
uidNumber: 2002
oxTelephoneCompany: None
oxSpouseName: None
oxTelephoneIp: None
employeeType: None
homeSharePath: None
oxCityOther: None
CtxCfgPresent: None
CtxWFHomeDir: None
unixhome: /home/Administrator
oxStreetOther: None
description: Built-in account for administering the computer/domain
firstname: None
birthday: None
oxSuffix: None
overridePWLength: None
oxSalesVolume: None
CtxMaxDisconnectionTime: None
CtxCfgDefaultClientPrinters: 0
displayName: Administrator
mailPrimaryAddress: None
CtxCfgClientDrivers: 0
CtxCfgTSLogon: 1
oxTelephoneTelex: None
univentionPolicyReference: cn=default-admins,cn=admin-settings,cn=users,cn=policies,dc=erlphase,dc=com
Please note: Why edit the file? The verbose mode will also log the password of your domain administrator to the logfile. Make sure to replace this with a dummy value in the logfile before uploading it. You should find entries like these in the first 25 lines or so:
that looks just fine.
yeah, sorry.