Problem
Executing udm groups/group list throws a traceback:
root@dc0:~ # udm groups/group list --superordinate "cn=domain Users,cn=groups,dc=reiherwald,dc=intranet"
Traceback (most recent call last):
File "/usr/share/univention-directory-manager-tools/univention-cli-server", line 219, in doit
output = univention.admincli.admin.doit(arglist)
File "/usr/lib/python2.7/dist-packages/univention/admincli/admin.py", line 409, in doit
out = _doit(arglist)
File "/usr/lib/python2.7/dist-packages/univention/admincli/admin.py", line 985, in _doit
object.open()
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/groups/group.py", line 361, in open
raise RuntimeError('%s not detected: %r' % (i, result))
RuntimeError: cn=Other Position,cn=templates,cn=univention,dc=reiherwald,dc=intranet not detected: ['guacamoleUser', 'oxUserObject', 'gitlabUser', 'jitsimeetUser', 'top', 'univentionUserTemplate', 'univentionObject', 'rocketchatUser']
Environment (optional)
UCS 5.0-1 before errata 259 (errata 259 will fix that issue)
own templates
Solution
The problem in that environment was that templates were member of a group. After removing the template from the groups udm groups/group list worked again.
Check the position of the RuntimeError:
RuntimeError: cn=Other Position,cn=templates,cn=univention,dc=reiherwald,dc=intranet not detected:`
root@dc0:~ # univention-ldapsearch -LLL -b "cn=Other Position,cn=templates,cn=univention,dc=reiherwald,dc=intranet" memberOf
dn: cn=Other Position,cn=templates,cn=univention,dc=reiherwald,dc=intranet
memberOf: cn=Domain Users,cn=groups,dc=reiherwald,dc=intranet
The template is member of the group “Domain Users” (what makes absolutely no sense). Remove this membership:
root@dc0:~ # ldapmodify -x -D "cn=admin,$(ucr get ldap/base)" -y /etc/ldap.secret <<EOR
dn: cn=Domain Users,cn=groups,dc=reiherwald,dc=intranet
changetype: modify
delete: uniqueMember
uniqueMember: cn=Other Position,cn=templates,cn=univention,dc=reiherwald,dc=intranet
EOR
modifying entry "cn=Domain Users,cn=groups,dc=reiherwald,dc=intranet"