Problem: New user cannot login

[scheinig]

Problem:

New added user cannot login:

Solution/Analysis:

In samba4 environments the s4-connector synchronises the user to samba, This is one of the mechanisms, where we should look

1. Is the connector running:

ps aufx |grep connector
/var/log/univention /connector-s4-status.log

2. Check for rejects:

univention-s4connector-list-rejected
less /var/log/univention/connector-s4.log
ess /var/log/univention/connector-s4-mapping.log

How-to: Handle s4-connector rejects

How-to: Handle s4-connector rejects What are rejects? Every change in openldap or samba is transferred to the other system by the s4-connector and kept in sync. By changes we mean, for example, changing a first name, last name or phone number. s4-connector rejects occur when such changes cannot be synchronized for various reasons. How to deal with rejects? You can use the following command to have a look at the current S4-Connector replication status: root@example:~# univention-s4connecto…

3. Increase the debug level

univention-ldapsearch -LLLo ldif-wrap=no uid=<benutzername>
univention-s4search  cn=<benutzername>
ucr set connector/debug/level='4'
/etc/init.d/univention-s4-connector restart

modify the user password and decrease ihe debug level again:

ucr set connector/debug/level='2'
/etc/init.d/univention-s4-connector restart

→/var/log/univention/connector-s4.log
→/var/log/univention/listener.log