Not synchronized S4 Connector objects

UCS - Univention Corporate Server
#1

Hi guys,

we get the following error with 2 users, one of them the administrator. The currently installed version ist 5.0-3 errata601.
When we run diagnose we see:
"Warning: not synchronized S4 Connector Objects"

this is the output of connector-s4.log

06.03.2023 09:23:12.069 LDAP (PROCESS): sync AD > UCS: Resync rejected dn: ‘CN=Administrator,CN=Users,DC=intern,DC=domain,DC=de’
06.03.2023 09:23:12.069 LDAP (ERROR ): unexpected Error during s4.resync_rejected
06.03.2023 09:23:12.070 LDAP (ERROR ): Traceback (most recent call last):
File “/usr/lib/python3/dist-packages/univention/s4connector/s4/init.py”, line 1760, in resync_rejected
elements = self.__search_ad_changeUSN(change_usn, show_deleted=True)
File “/usr/lib/python3/dist-packages/univention/s4connector/s4/init.py”, line 965, in __search_ad_changeUSN
usn_filter = format_escaped(’(|(uSNChanged={0!e})(uSNCreated={0!e}))’, changeUSN)
File “/usr/lib/python3/dist-packages/univention/s4connector/s4/init.py”, line 489, in format_escaped
return LDAPEscapeFormatter().format(format_string, *args, **kwargs)
File “/usr/lib/python3.7/string.py”, line 186, in format
return self.vformat(format_string, args, kwargs)
File “/usr/lib/python3.7/string.py”, line 190, in vformat
result, _ = self._vformat(format_string, args, kwargs, used_args, 2)
File “/usr/lib/python3.7/string.py”, line 234, in _vformat
obj = self.convert_field(obj, conversion)
File “/usr/lib/python3/dist-packages/univention/s4connector/s4/init.py”, line 474, in convert_field
raise TypeError(‘Filter must be string, not bytes: %r’ % (value,))
TypeError: Filter must be string, not bytes: b’408372’

Any help is appreciated!

Best regards
KaBi

#2

Please post the output of:

univention-s4connector-list-rejected

with best
sven

#3

Here is it. I changend the domain name only.

UCS rejected

S4 rejected

1:    S4 DN: CN=domain.user,OU=User,OU=domainou,DC=intern,DC=domain,DC=de
     UCS DN: uid=domain.user,ou=user,ou=domainou,dc=intern,dc=domain,dc=de
2:    S4 DN: CN=Administrator,CN=Users,DC=intern,DC=domain,DC=de
     UCS DN: uid=administrator,cn=users,dc=intern,dc=domain,dc=de

    last synced USN: 408764
#4 
/usr/share/univention-s4-connector/remove_s4_rejected.py CN=domain.user,OU=User,OU=domainou,DC=intern,DC=domain,DC=de
/usr/share/univention-s4-connector/remove_s4_rejected.py CN=Administrator,CN=Users,DC=intern,DC=domain,DC=de
/usr/share/univention-s4-connector/remove_ucs_rejected.py uid=domain.user,ou=user,ou=domainou,dc=intern,dc=domain,dc=de
/usr/share/univention-s4-connector/remove_ucs_rejected.py uid=administrator,cn=users,dc=intern,dc=domain,dc=de
#5

Please be careful while handling S4-connector rejects. Simple removing rejects from the list always means that there are differences in OpenLDAP and Samba/AD. How-to: Handle s4-connector rejects also mentions the resync-tools which can be used to try again.
I dont know if this helps in this case but the problem looks like Bug 54586 – [S4C] Sqlite3 database from UCS 4.4 contains bytestrings

Mastodon