Hi Thorp-Hansen, Thanks for your help, I am Roman's colleague.
Before we go ahead and reprovision the S4 database, I would like to share some more debugging which might be helpful in finding out how this corruption happened.
connector-s4.log shows sync failures, here is a traceback:
06.02.2017 14:35:45,736 LDAP (PROCESS): sync to ucs: Resync rejected dn: CN=Domain Computers,CN=Groups,DC=office,DC=ourdomain,DC=co,DC=uk
06.02.2017 14:35:45,743 LDAP (PROCESS): sync to ucs: [ group] [ modify] cn=domain computers,cn=groups,dc=office,dc=ourdomain,dc=co,dc=uk
06.02.2017 14:35:45,903 LDAP
(ERROR ): failed in post_con_modify_functions
06.02.2017 14:35:45,903 LDAP (ERROR ): Traceback (most recent call last):
File "/usr/lib/pymodules/python2.7/univention/s4connector/__init__.py", line 1505, in sync_to_ucs
f(self, property_type, object)
File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 85, in group_members_sync_to_ucs
return s4connector.group_members_sync_to_ucs(key, object)
File "/usr/lib/pymodules/python2.7/univention/s4connector/s4/__init__.py", line 1981, in group_members_sync_to_ucs
File "/usr/lib/pymodules/python2.7/univention/admin/handlers/groups/group.py", line 436, in fast_member_add
return self.lo.modify(self.dn, ml)
File "/usr/lib/pymodules/python2.7/univention/admin/uldap.py", line 471, in modify
raise univention.admin.uexceptions.ldapError(_err2str(msg), original_exception=msg)
ldapError: Type or value exists: memberUid: value #0 provided more than once
It seems this is due to upper / lower case inconsistencies
<abbr title="Univention Corporate Server">UCS</abbr> rejected
1: S4 DN: CN=Domain Computers,CN=Groups,DC=office,DC=ourdomain,DC=co,DC=uk
UCS DN: cn=domain computers,cn=groups,dc=office,dc=ourdomain,dc=co,dc=uk
last synced USN: 121324
which were perhaps caused by this bug
forge.univention.org/bugzilla/s ... i?id=43247
and fixed in this patch
which we have already installed.
The currently installed release version is 4.1-4 errata380
Do you think it is worth trying to manually get rid of this S4 reject using this procedure
sdb.univention.de/content/6/294/ ... jects.html
before we hit the nuclear button and reprovision samba?