Hello,
I want to use Radius attributes in UCS and I manually imported freeradius schema into LDAP.
I defined in the LDAP tree under univention/custom attributes two Radius attributes called radiusFramedIPAddress and radiusFramedIPNetmask in order to assign to VPN users an IP address and netmask.
I’m using UCS 5.0 core with the latest updates.
But when I checked the s4 connector log I see the following error:
21.01.2023 22:39:07.596 LDAP (PROCESS): sync AD > UCS: Resync rejected dn: 'CN=Administrator,CN=Users,DC=domain,DC=net'
21.01.2023 22:39:07.607 LDAP (PROCESS): sync AD > UCS: [ user] [ modify] 'uid=administrator,cn=users,dc=domain,dc=net'
21.01.2023 22:39:07.626 LDAP (ERROR ): Unknown Exception during sync_to_ucs
21.01.2023 22:39:07.626 LDAP (ERROR ): Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/univention/s4connector/__init__.py", line 1501, in sync_to_ucs
result = self.modify_in_ucs(property_type, object, module, position)
File "/usr/lib/python3/dist-packages/univention/s4connector/__init__.py", line 1226, in modify_in_ucs
res = ucs_object.modify(serverctrls=serverctrls, response=response)
File "/usr/lib/python3/dist-packages/univention/admin/handlers/users/user.py", line 1284, in modify
return super(object, self).modify(*args, **kwargs)
File "/usr/lib/python3/dist-packages/univention/admin/handlers/__init__.py", line 648, in modify
self.ready()
File "/usr/lib/python3/dist-packages/univention/admin/handlers/__init__.py", line 327, in ready
raise univention.admin.uexceptions.insufficientInformation(_('The following properties are missing:\n%s') % ('\n'.join(missing),))
univention.admin.uexceptions.insufficientInformation: Information provided is not sufficient: The following properties are missing:
radiusFramedIPAddress
radiusFramedIPNetmask.
Also when I checked the rejects I saw this
# univention-s4connector-list-rejected
UCS rejected
S4 rejected
1: S4 DN: CN=Administrator,CN=Users,DC=domain,DC=net
UCS DN: uid=administrator,cn=users,dc=domain,dc=net
last synced USN: 4164
Then I deleted the 2 custom attributes and the reject automatically dissappeared and no more error like the one above was seen in the logs.
What I am doing wrong when using these customs attributes ? Looking at the error I’m thinking maybe the freeradius schema attributes did not sync between UCS and S4 ?
Thank you,