Problem:
The AD-Connector tool univention-adconnector-list-rejected lists a reject and the connector.log shows a Python traceback that ends with the line:
TYPE_OR_VALUE_EXISTS: {'info': '00002083: AtrErr: DSID-03151D27, #1:\n\t0: 00002083: DSID-03151D27,
problem 1006 (ATT_OR_VALUE_EXISTS), data
Solution:
This happens when the AD-Connector attempts to sync an attribute value to Active Directory that is already present. This can happen e.g. for multivalue attributes like description that are case insensitive in the LDAP schema, but the AD-Connector doesn’t recognize that both, the OpenLDAP-object and the AD-object effectively have the same values, that only differ by upper/lower-case spelling. This is a known bug of the AD-Connector currently. As a workaround the spelling of the value can be adjusted in UDM/OpenLDAP.