Hallo Univention Community,
auf unserem Univention 3.2.1 System haben wir es geschafft, durch Hinzufügen von Rechnern in der Domäne über die Win7-Domänenregistrierung eine Inkonsistenz zwischen UCS und dem S4-Ldap zu erzeugen:
Zyklisch schreibt das System ins connector-s4.log
06.03.2014 22:58:35,570 LDAP (PROCESS): sync from ucs: Resync rejected file: /var/lib/univention-connector/s4/1394015145.914378
06.03.2014 22:58:35,594 LDAP (PROCESS): sync from ucs: [windowscomputer] [ modify] cn=BARBARAE-NB-xxx,cn=computers,dc=xx,dc=com
06.03.2014 22:58:35,610 LDAP (ERROR ): sync_from_ucs: traceback during add object: cn=BARBARAE-NB-xxx,cn=computers,dc=xx,dc=com
06.03.2014 22:58:35,611 LDAP (ERROR ): sync_from_ucs: traceback due to addlist: [('objectClass', ['top', 'computer']), ('userAccountControl', ['4096']), (u'cn', [u'barbara-nb-seq', u'BARBARAE-NB-xxx']), ('sAMAccountName', [u'barbara-nb-xxx$'])]
06.03.2014 22:58:35,719 LDAP (WARNING): sync failed, saved as rejected
/var/lib/univention-connector/s4/1394015145.914378
06.03.2014 22:58:35,720 LDAP (WARNING): Traceback (most recent call last):
File "/usr/lib/pymodules/python2.6/univention/s4connector/__init__.py", line 752, in __sync_file_from_ucs
if ((old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, unicode(old_dn,'utf8'), old))
File "/usr/lib/pymodules/python2.6/univention/s4connector/s4/__init__.py", line 2322, in sync_from_ucs
self.lo_s4.lo.add_ext_s(compatible_modstring(object['dn']), compatible_addlist(addlist), serverctrls=ctrls) #FIXME encoding
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 796, in add_ext_s
return self._apply_method_s(SimpleLDAPObject.add_ext_s,*args,**kwargs)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 766, in _apply_method_s
return func(self,*args,**kwargs)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 180, in add_ext_s
return self.result(msgid,all=1,timeout=self.timeout)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 422, in result
res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 426, in result2
res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 432, in result3
ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)
File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 96, in _ldap_call
result = func(*args,**kwargs)
CONSTRAINT_VIOLATION: {'info': '0000202F: SINGLE-VALUE attribute cn on CN=BARBARAE-NB-xxx,CN=Computers,DC=xxx,DC=com specified more than once', 'desc': 'Constraint violation'}
univention-s4connector-list-rejected bringt[code]UCS rejected
1: UCS DN: cn=BARBARAE-NB-xxx,cn=computers,dc=xxx,dc=com
S4 DN: <not found>
Filename: /var/lib/univention-connector/s4/1394015145.914378
S4 rejected
last synced USN: 6939[/code]
Wie kann ich die beiden LDAPs wieder konsistent bekommen, so dass die Meldung verschwindet und wir dieses Konto nochmal anlegen können?
Vielen Dank und beste Grüße
Alexander Vukovic