OX: Ein Benutzer mit der ID "<Nutzer>" konnte nicht im Kontext 10 gefunden werden. (USR-0015)

jstaerk · January 25, 2024, 5:45pm

Hallo,

Mir ist klar, dass es 2017 mal einen Post zum Theme “ID oxdemo konnte nicht im Kontext 10 gefunden worden”
ein-benutzer-mit-der-id-oxdemo-konnte-nicht-im-kontext-10-gefunden-werden-usr-0015/6628
aber das hier scheint anders zu sein.

Ich lege einen neuen Groupware-Nutzer an und der ist dann auch per Imap und SMTP erreichbar und kann sein Passwort im Self Service ändern, einzig er kann sich nicht in Open-XChange einloggen: OX loggt ‘Cannot find user with identifier dakemlek in context 10.’ exceptionID=-1714349955-7434 und listuser zeigt ihn auch nicht an, dummerweise gibts auch keine Fehler in den logs

Es handelt sich um ein UCS 5.0-6 errata928 mit OX 7.10.16.
OX loggt

2024-01-25T18:06:37,852+0100 INFO [OXWorker-0003885] com.openexchange.login.internal.LoginPerformer.logLoginRequest(LoginPerformer.java:722)
Login:dakemlek IP:77.190.162.150 AuthID:cef895f8d13a417f914d60bece6c9bf8 Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0 Client:open-xchange-appsuite(7.10.6-20) Interface:HTTP_JSON No session created.
com.openexchange.exception.OXException: USR-0015 Categories=ERROR Message=‘Cannot find user with identifier dakemlek in context 10.’ exceptionID=-1714349955-7434
…

und resync ox-user zeigt
Modules:
3 app_attributes /usr/lib/univention-directory-listener/system/app_attributes.py
3 bind /usr/lib/univention-directory-listener/system/bind.py
3 dovecot-functional-account /usr/lib/univention-directory-listener/system/dovecot_ox_functional_account.py
3 dovecot /usr/lib/univention-directory-listener/system/dovecot.py
3 dovecot-shared-folder /usr/lib/univention-directory-listener/system/dovecot-shared-folder.py
3 faillog /usr/lib/univention-directory-listener/system/faillog.py
3 fetchmailrc /usr/lib/univention-directory-listener/system/fetchmailrc.py
3 gencertificate /usr/lib/univention-directory-listener/system/gencertificate.py
3 hosteddomains /usr/lib/univention-directory-listener/system/hosteddomains.py
3 keytab-member /usr/lib/univention-directory-listener/system/keytab-member.py
3 keytab /usr/lib/univention-directory-listener/system/keytab.py
3 ldap-cache-baa04df67e7af6bb0769f5cb7e72dba9 /usr/lib/univention-directory-listener/system/ldap-cache-baa04df67e7af6bb0769f5cb7e72dba9.py
3 ldap_extension /usr/lib/univention-directory-listener/system/ldap_extension.py
3 ldap_server /usr/lib/univention-directory-listener/system/ldap_server.py
3 license_uuid /usr/lib/univention-directory-listener/system/license_uuid.py
3 monitoring-client /usr/lib/univention-directory-listener/system/monitoring-client.py
3 nagios-client /usr/lib/univention-directory-listener/system/nagios-client.py
3 nfs-homes /usr/lib/univention-directory-listener/system/nfs-homes.py
3 nfs-shares /usr/lib/univention-directory-listener/system/nfs-shares.py
3 nscd_update /usr/lib/univention-directory-listener/system/nscd.py
3 nss /usr/lib/univention-directory-listener/system/nss.py
3 ox-connector /usr/lib/univention-directory-listener/system/ox-connector.py
3 pkgdb-watch /usr/lib/univention-directory-listener/system/pkgdb-watch.py
3 portal_groups /usr/lib/univention-directory-listener/system/portal_groups.py
3 portal_server /usr/lib/univention-directory-listener/system/portal_server.py
3 quota /usr/lib/univention-directory-listener/system/quota.py
3 selfservice /usr/lib/univention-directory-listener/system/selfservice.py
3 udm_extension /usr/lib/univention-directory-listener/system/udm_extension.py
3 umc-service-providers /usr/lib/univention-directory-listener/system/umc-service-providers.py
3 univention-admin-diary-backend /usr/lib/univention-directory-listener/system/univention-admin-diary-backend.py
3 univention-saml-groups /usr/lib/univention-directory-listener/system/univention-saml-groups.py
3 univention-saml-idp-config /usr/lib/univention-directory-listener/system/univention-saml-idp-config.py
3 univention-saml-servers /usr/lib/univention-directory-listener/system/univention-saml-servers.py
3 univention-saml-simplesamlphp-configuration /usr/lib/univention-directory-listener/system/univention-saml-simplesamlphp-configuration.py
3 well-known-sid-name-mapping /usr/lib/univention-directory-listener/system/well-known-sid-name-mapping.py

ciao
Jochen

BenSommer · January 26, 2024, 1:47am

Moin
soetwas hatte ich auch schon bei einem System, nachdem auf den OX Connector installiert wurde. Ich hatte auf der OX seite User IDs, die so nicht sichtbar waren und somit eine synchronisation unmöglich machten, da aufgrund vorhandener ID der User nicht synchronisiert werden konnte. Hilfreich war:

ucr set listener/debug/level=4
service univention-directory-listener restart 

Benutzer OX anzeigen, schauen ob er angelegt ist
hast du ja gemacht, OX User ist nicht da

tail -f /var/log/univention/listener_modules/ox-connector.log 
defekten Benutzer suchen „assignd“ als Schlagwort, da sieht man die ID, die das Problem bereitet

Wenn sich eine ID findet

Benutzer mit der ID 128 löschen (Beispiel)
/opt/open-xchange/sbin/deleteuser -c 10 -A oxadmin -P "$(cat /etc/ox-secrets/context10.secret)" -i 128

Danach schauen ob alles funktioniert
tail -f /var/log/univention/listener_modules/ox-connector.log

So war es bei einem meiner Server, vielleicht hilft es ja auch bei dir.

Gruß Ben

jstaerk · January 26, 2024, 12:12pm

Hi,

stimmt, mit dem Connector ist irgendwas faul, ich hab v 2.2.8 und fehlerhafte Nutzer hab ich keine aber wohl http(s) probleme. Aber mein Zertifikat scheint gut zu sein und ich komme auch auf die wsdl-Datei drauf…?

2024-01-26 13:04:42 INFO Looking for old data in /var/lib/univention-appcenter/apps/ox-connector/data/listener/old/944ba38c-4a30-103e-8744-19873f2fb5d4.json
2024-01-26 13:04:42 INFO Handling PosixPath(’/var/lib/univention-appcenter/apps/ox-connector/data/listener/2023-10-24-16-36-11-250041.json’)
2024-01-26 13:04:42 INFO Creating Object(‘oxmail/oxcontext’, ‘cn=context10,cn=open-xchange,dc=usegroup,dc=de’)
2024-01-26 13:06:09 DEBUG handler.init:122 Starting with configuration: Configuration(name=‘ox-connector’)
2024-01-26 13:06:52 INFO Error while processing /var/lib/univention-appcenter/apps/ox-connector/data/listener/2023-10-24-16-36-11-250041.json
2024-01-26 13:06:52 WARNING Traceback (most recent call last):
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connection.py”, line 169, in _new_conn
2024-01-26 13:06:52 WARNING conn = connection.create_connection(
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/util/connection.py”, line 96, in create_connection
2024-01-26 13:06:52 WARNING raise err
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/util/connection.py”, line 86, in create_connection
2024-01-26 13:06:52 WARNING sock.connect(sa)
2024-01-26 13:06:52 WARNING TimeoutError: [Errno 110] Operation timed out
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING During handling of the above exception, another exception occurred:
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING Traceback (most recent call last):
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connectionpool.py”, line 699, in urlopen
2024-01-26 13:06:52 WARNING httplib_response = self._make_request(
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connectionpool.py”, line 382, in _make_request
2024-01-26 13:06:52 WARNING self._validate_conn(conn)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connectionpool.py”, line 1010, in _validate_conn
2024-01-26 13:06:52 WARNING conn.connect()
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connection.py”, line 353, in connect
2024-01-26 13:06:52 WARNING conn = self._new_conn()
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connection.py”, line 181, in _new_conn
2024-01-26 13:06:52 WARNING raise NewConnectionError(
2024-01-26 13:06:52 WARNING urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPSConnection object at 0x7fd1f8887040>: Failed to establish a new connection: [Errno 110] Operation timed out
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING During handling of the above exception, another exception occurred:
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING Traceback (most recent call last):
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/requests/adapters.py”, line 486, in send
2024-01-26 13:06:52 WARNING resp = conn.urlopen(
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/connectionpool.py”, line 755, in urlopen
2024-01-26 13:06:52 WARNING retries = retries.increment(
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/urllib3/util/retry.py”, line 574, in increment
2024-01-26 13:06:52 WARNING raise MaxRetryError(_pool, url, error or ResponseError(cause))
2024-01-26 13:06:52 WARNING urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host=‘mail.usegroup.de’, port=443): Max retries exceeded with url: /webservices/OXContextService?wsdl (Caused by NewConnectionError(’<urllib3.connection.HTTPSConnection object at 0x7fd1f8887040>: Failed to establish a new connection: [Errno 110] Operation timed out’))
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING During handling of the above exception, another exception occurred:
2024-01-26 13:06:52 WARNING
2024-01-26 13:06:52 WARNING Traceback (most recent call last):
2024-01-26 13:06:52 WARNING File “/tmp/univention-ox-connector.listener_trigger”, line 351, in run_on_files
2024-01-26 13:06:52 WARNING function(obj)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/provisioning/init.py”, line 69, in run
2024-01-26 13:06:52 WARNING create_context(obj)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/provisioning/contexts.py”, line 64, in create_context
2024-01-26 13:06:52 WARNING if context_exists(obj):
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/provisioning/contexts.py”, line 59, in context_exists
2024-01-26 13:06:52 WARNING return bool(get_obj_by_name_from_ox(Context, context_id, None))
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/provisioning/helpers.py”, line 41, in get_obj_by_name_from_ox
2024-01-26 13:06:52 WARNING return klass.from_ox(context_id, name=name)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/backend.py”, line 278, in from_ox
2024-01-26 13:06:52 WARNING context_service = cls.service(DEFAULT_CONTEXT)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/backend.py”, line 105, in service
2024-01-26 13:06:52 WARNING cls._service_objs[cls._object_type][context_id] = OxSoapServiceClass(cls.get_client_credentials(context_id))
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/services.py”, line 155, in init
2024-01-26 13:06:52 WARNING self.Type = getattr(client_credentials.types, self._type_name, None)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/credentials.py”, line 84, in types
2024-01-26 13:06:52 WARNING self.class._types = Types(self.server)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/types.py”, line 71, in init
2024-01-26 13:06:52 WARNING self.class.wsdl_context = get_wsdl(server, ‘Context’)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/univention/ox/soap/services.py”, line 109, in get_wsdl
2024-01-26 13:06:52 WARNING return ZeepClient(WS_URLS[object_type].format(server=server)).wsdl
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/client.py”, line 76, in init
2024-01-26 13:06:52 WARNING self.wsdl = Document(wsdl, self.transport, settings=self.settings)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/wsdl/wsdl.py”, line 92, in init
2024-01-26 13:06:52 WARNING self.load(location)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/wsdl/wsdl.py”, line 95, in load
2024-01-26 13:06:52 WARNING document = self._get_xml_document(location)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/wsdl/wsdl.py”, line 155, in _get_xml_document
2024-01-26 13:06:52 WARNING return load_external(
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/loader.py”, line 89, in load_external
2024-01-26 13:06:52 WARNING content = transport.load(url)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/transports.py”, line 123, in load
2024-01-26 13:06:52 WARNING content = self._load_remote_data(url)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/zeep/transports.py”, line 135, in _load_remote_data
2024-01-26 13:06:52 WARNING response = self.session.get(url, timeout=self.load_timeout)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/requests/sessions.py”, line 602, in get
2024-01-26 13:06:52 WARNING return self.request(“GET”, url, **kwargs)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/requests/sessions.py”, line 589, in request
2024-01-26 13:06:52 WARNING resp = self.send(prep, **send_kwargs)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/requests/sessions.py”, line 703, in send
2024-01-26 13:06:52 WARNING r = adapter.send(request, **kwargs)
2024-01-26 13:06:52 WARNING File “/usr/lib/python3.9/site-packages/requests/adapters.py”, line 519, in send
2024-01-26 13:06:52 WARNING raise ConnectionError(e, request=request)
2024-01-26 13:06:52 WARNING requests.exceptions.ConnectionError: HTTPSConnectionPool(host=‘mail.usegroup.de’, port=443): Max retries exceeded with url: /webservices/OXContextService?wsdl (Caused by NewConnectionError(’<urllib3.connection.HTTPSConnection object at 0x7fd1f8887040>: Failed to establish a new connection: [Errno 110] Operation timed out’))
2024-01-26 13:06:52 INFO This is consecutive error #60021
2024-01-26 13:06:52 INFO Sleeping for 0 sec
2024-01-26 13:06:52 INFO Successfully processed 0 files during this run

jstaerk · January 26, 2024, 12:53pm

OK wir hatten einen Failover, sprich der Server hatte mal die IP gewechselt.

Wenn ich per

univention-app shell ox-connector
/oxp # wget https://mail.usegroup.de/webservices/OXContextService?wsdl

sucht er aber nach der alten IP. Ich habe in der Registry mal nach der alten IP gesucht und ldap/acl/read/IPs korrigiert ox neu gestartet und die user geresynced, hilft aber allex nix.
Was ist denn das für ein cache(?) und wie kriege ich den leer?

BenSommer · January 26, 2024, 12:54pm

Moin
stell mal auf http um, da hatte ich auch einmal ein Problem und hier findest du die Kennworte:

oxadminmaster /etc/ox-secrets/master.secret
oxadmin /etc/ox-secrets/context10.secret

Vielleicht hat der Benutzer im Connector das falsche Kennwort

Gruß Ben

jstaerk · January 27, 2024, 7:30am

Hi,

ich glaube zeitgleich zu deiner Antwort (vielen Dank für die Hilfe übrigens) hatte ich meine Erkenntnisse gepostet.
Habs hingekriegt.

getent hosts mail.usegroup.de

in der shell war auch falsch und nslookup mail.usegroup.de hat bei näherem Hinsehen sogar im host nicht gepasst.

udm dns/host_record list

war auch falsch, habe die Einträge also in der webbasierten univention management console über Domäne/DNS korrigiert und dann gings. Die dortigen reverse dns einträge kriege ich vll auch noch irgendwann aktualisiert aber das hat Zeit.

Habe meine Dokumentation zum notfallmäßigen Umstellen der IP aktualisiert, diese lautet jetzt

ucr set interfaces/ens18/start=true
ucr set interfaces/ens18/type=static
ucr set interfaces/ens18/address=78.47.210.153
ucr set interfaces/ens18/netmask=255.255.255.255
ucr set interfaces/primary=ens18
ucr set gateway=195.201.10.254
ucr set nameserver1=78.47.210.153
Nameserver muss die neue eigene IP sein

service networking restart
Should now respond to pings on 153 and be able to ping external urls. In the registry: Change DNS. Adjust ldap/acl/read/ips. In the univention management portal Dömane/DNS: Change the two mail.usegroup.de entries to new IP.

Update /etc/hosts to reflect the new IP for mail.usegroup.de mail In the internet DNS config: Update reverse DNS to resolve mail.usegroup.de for new IP.

BenSommer · January 29, 2024, 1:55am

Schön das es geklappt hat, dann hast du von meiner Seite noch ein paar Infos, falls der syn einmal wieder nicht gehen sollte

Gruß Ben