Problem:
With ucs 5 the connector traceback appeareance has changed a little bit.
Instead of a simple permission denied, there could be more detailed messages shown:
[…]
ldap.REFERRAL: {'desc': 'Referral', 'info': 'Referral:\nldap://master.schulen-schein.me:7389/cn=WS0815,cn=computers,dc=schulen-schein,dc=me}
followed by
[…]
ldap.INSUFFICIENT_ACCESS: {'desc': 'Insufficient access'}
and at least
[…]
univention.admin.uexceptions.permissionDenied
Solution:
Here the connector cannot write back the computerobject cn=WS0815 on the master:
ldap.REFERRAL: {'desc': 'Referral', 'info': 'Referral:\nldap://master.schulen-schein.me:7389/cn=WS0815,cn=computers,dc=schulen-schein,dc=me}
because the school replica object has not enough permissions to to that.
With a detailed look, the computer object is not placed in a school ou
cn=WS0815,cn=computers,dc=schulen-schein,dc=me
we would expect something like
cn=WS0815,cn=computers,ou=one,dc=schulen-schein,dc=me