LOG connector-s4

UCS - Univention Corporate Server
#1

Hi there,

My log is very very big (26GB) from what i can see the problem is this message that keep repeat

[quote]01.09.2016 09:42:17,93 LDAP (PROCESS): sync from ucs: [ user] [ add] CN=Fabrica 1,cn=users,DC=ccm,DC=local
01.09.2016 09:42:17,94 LDAP (WARNING): encode_s4_object: encode attrib terminalServer failed, ignored!
01.09.2016 09:42:17,99 LDAP (WARNING): password_sync_ucs_to_s4: userPrincipalName != krb5Principal: 'fabrica1@ccm.local’ != ‘Expedição1@CCM.LOCAL’
01.09.2016 09:42:17,99 LDAP (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
01.09.2016 09:42:17,99 LDAP (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
01.09.2016 09:42:17,99 LDAP (WARNING): sync failed, saved as rejected
/var/lib/univention-connector/s4/1472718303.832256
01.09.2016 09:42:17,99 LDAP (WARNING): Traceback (most recent call last):
File “/usr/lib/pymodules/python2.7/univention/s4connector/init.py”, line 805, in __sync_file_from_ucs
or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/init.py”, line 2613, in sync_from_ucs
f(self, property_type, object)
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/password.py”, line 580, in password_sync_ucs_to_s4
unicodePwd_new = binascii.a2b_hex(ucsNThash)
TypeError: Non-hexadecimal digit found[/quote]

How can i solve that message? Must i change the Expedição to Expedicao ?

#2

Hi,
what version of UCS are you running?

I would recommend to check, if the log was ever rotated. A single reject should not cause such a noise. Typcially the log will be rotated once a week.

The message “sqlite: You must not use 8-bit bytestrings” also appered in [bug]38704[/bug]. Even if this specific bug is marked as fixed in UCS 4.0-2 it might well be that this is another incarnation.
I would try what you already suggested and remove the special characters if possible,

In case this helps it would be nice if you could report here. This is something we should record in the Bug Database to get it fixed.

Best Regards,
Dirk Ahrnke

#3

Hy…I have the latest version, up to date

The log rotates… but for some reason the partition went 100%, so the rotation stop.
I think that broke the sqlite.

After delete the log and restart sqlite the problem is gone in part…

I think that file is big… i think the problem is in the previous error reported that keep logged…

[quote]root@CCMDC01:/var/log/univention# tail -f connector-s4.log
/var/lib/univention-connector/s4/1472718303.801967
05.09.2016 08:25:31,592 LDAP (WARNING): Traceback (most recent call last):
File “/usr/lib/pymodules/python2.7/univention/s4connector/init.py”, line 805, in __sync_file_from_ucs
or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/init.py”, line 2613, in sync_from_ucs
f(self, property_type, object)
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/password.py”, line 580, in password_sync_ucs_to_s4
unicodePwd_new = binascii.a2b_hex(ucsNThash)
TypeError: Non-hexadecimal digit found[/quote]

S4 Rejects and System errors
#4

Hi,

the last error seems to be different and was recorded in [bug]35540[/bug] (password sync fails after takeover with ad/member=true for guest account).

Best regards,
Dirk Ahrnke

#5

Thanks ahrmke i don’t see that bug…

But from what i can see is an old one… any solution to that?

#6

As far as I can see Bug 35540 happened when a guest account without password is about to be synced.
You only reported the log lines, I did not see the referring object.
Any further steps may depend on the knowledge which object is affected.

Just in case its not known to someone who reads this thread: How to deal with s4-connector rejects

#7

[quote]08.09.2016 14:26:37,525 LDAP (PROCESS): sync from ucs: Resync rejected file: /var/lib/univention-connector/s4/1472718303.801967
08.09.2016 14:26:37,528 LDAP (PROCESS): sync from ucs: [ user] [ add] cn=guest,cn=users,DC=ccm,DC=local
08.09.2016 14:26:37,537 LDAP (WARNING): sync failed, saved as rejected
/var/lib/univention-connector/s4/1472718303.801967
08.09.2016 14:26:37,537 LDAP (WARNING): Traceback (most recent call last):
File “/usr/lib/pymodules/python2.7/univention/s4connector/init.py”, line 805, in __sync_file_from_ucs
or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/init.py”, line 2613, in sync_from_ucs
f(self, property_type, object)
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/password.py”, line 580, in password_sync_ucs_to_s4
unicodePwd_new = binascii.a2b_hex(ucsNThash)
TypeError: Non-hexadecimal digit found

08.09.2016 14:27:33,158 LDAP (PROCESS): sync from ucs: Resync rejected file: /var/lib/univention-connector/s4/1472718303.801967
08.09.2016 14:27:33,162 LDAP (PROCESS): sync from ucs: [ user] [ add] cn=guest,cn=users,DC=ccm,DC=local
08.09.2016 14:27:33,171 LDAP (WARNING): sync failed, saved as rejected
/var/lib/univention-connector/s4/1472718303.801967
08.09.2016 14:27:33,171 LDAP (WARNING): Traceback (most recent call last):
File “/usr/lib/pymodules/python2.7/univention/s4connector/init.py”, line 805, in __sync_file_from_ucs
or (not old_dn and not self.sync_from_ucs(key, object, premapped_ucs_dn, old_dn, old, new))):
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/init.py”, line 2613, in sync_from_ucs
f(self, property_type, object)
File “/usr/lib/pymodules/python2.7/univention/s4connector/s4/password.py”, line 580, in password_sync_ucs_to_s4
unicodePwd_new = binascii.a2b_hex(ucsNThash)
TypeError: Non-hexadecimal digit found
[/quote]

So the guest account is true.
What is best? Remove guest account

#8

[quote=“codedmind”]
So the guest account is true.
What is best? Remove guest account[/quote]

If you need this account you can also set a password, otherwise remove or disable it.

#9

I have the same problem and half of my accounts which are in AD are not imported.
27.01.2018 10:01:38,212 LDAP (WARNING): sync to ucs was not successfull, save rejected
27.01.2018 10:01:38,212 LDAP (WARNING): object was: CN=سید مهرداد محروقی,OU=Iranserver,OU=Clients,OU=GreenWeb,DC=greenweb,DC=local
27.01.2018 10:01:38,212 LDAP (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
27.01.2018 10:01:38,213 LDAP (WARNING): sqlite: You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
27.01.2018 10:01:38,229 LDAP (PROCESS): sync to ucs: [ user] [ add] uid=a.mohamadabadi,ou=design,ou=clients,ou=greenweb,dc=greenweb,dc=local
27.01.2018 10:01:38,631 LDAP (ERROR ): Unknown Exception during sync_to_ucs
27.01.2018 10:01:38,631 LDAP (ERROR ): Traceback (most recent call last):
File “/usr/lib/pymodules/python2.7/univention/connector/init.py”, line 1342, in sync_to_ucs
result = self.add_in_ucs(property_type, object, module, position)
File “/usr/lib/pymodules/python2.7/univention/connector/init.py”, line 1185, in add_in_ucs
return ucs_object.create() and self.__modify_custom_attributes(property_type, object, ucs_object, module, position)
File “/usr/lib/pymodules/python2.7/univention/admin/handlers/init.py”, line 381, in create
dn = self._create(response=response, serverctrls=serverctrls)
File “/usr/lib/pymodules/python2.7/univention/admin/handlers/init.py”, line 1036, in _create
self.lo.add(self.dn, al, serverctrls=serverctrls, response=response)
File “/usr/lib/pymodules/python2.7/univention/admin/uldap.py”, line 482, in add
raise univention.admin.uexceptions.ldapError(_err2str(msg), original_exception=msg)
ldapError: No such object

#10

Even though some part of the error message looks the same, you really seem to be having two issues that are both different from the original poster’s problems. Please create a separate topic for yours. Thanks.

Mastodon