Problem:
The Univention Active Directory Connector shall be forced re resync all objects.
Solution:
To initiate a resynchronization of all objects (depending on the sync-mode defined in UCR connector/ad/mapping/syncmode) the following steps are necessary:
Stop the Univention Active Directory Connector service:
/etc/init.d/univention-ad-connector stop
Backup the internal Active Directory Connector database (depending on the UCS version used, the file is named internal.cfg or internal.sqlite):
find /etc/univention/connector/ \( -name "internal.cfg" -o -name "internal.sqlite" \) -exec mv "{}" "{}.bak_$(date +%s)" \;
Delete left over reject objects. The path to those objetcs is defined in the UCR variable connector/ad/listener/dir which defaults to /var/lib/univention-connector/ad:
rm -f /var/lib/univention-connector/ad/*
Resync the Univention Active Directory Connector listener module:
univention-directory-listener-ctrl resync ad-connector
Start the Univention Active Directory Connector service:
/etc/init.d/univention-ad-connector start
You should see a lot of “new” changes in /var/log/univention/connector-status.log as well as synchronization progress in /var/log/univention/connector.log.
Since UCS5 the naming of the logfiles changed to /var/log/univention/connector-ad-status.logand var/log/univention/connector-ad.log