Moin zusammen,
ich habe seit einiger Zeit zwei s4 Rejects die sich einfach nicht lösen lassen. Ich habe schon gefühlt jeden Artikel hier im Forum durchgearbeitet, was für alle anderen Rejects auch funktioniert hat, die beiden sind aber nicht so einfach zu lösen.
{ ~ }-> univention-s4connector-list-rejected
UCS rejected
S4 rejected
1: S4 DN: CN=Allowed RODC Password Replication Group,CN=Groups,DC=cevo,DC=de
UCS DN: cn=allowed rodc password replication group,cn=groups,dc=cevo,dc=de
2: S4 DN: CN=Guests,CN=Builtin,DC=cevo,DC=de
UCS DN: cn=guests,cn=builtin,dc=cevo,dc=de
last synced USN: 14016
Die connector-s4.log ist an dieser Stelle leider auch wenig aussagekräftig
08.01.2020 14:15:12.555 LDAP (PROCESS): sync to ucs: Resync rejected dn: CN=Allowed RODC Password Replication Group,CN=Groups,DC=cevo,DC=de
08.01.2020 14:15:12.572 LDAP (PROCESS): sync to ucs: [ group] [ modify] u'cn=allowed rodc password replication group,cn=groups,dc=cevo,dc=de'
08.01.2020 14:15:12.759 LDAP (ERROR ): Unknown Exception during sync_to_ucs
08.01.2020 14:15:12.760 LDAP (ERROR ): Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1555, in sync_to_ucs
result = self.modify_in_ucs(property_type, object, module, position)
File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1299, in modify_in_ucs
res = ucs_object.modify(serverctrls=serverctrls, response=response)
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 651, in modify
dn = self._modify(modify_childs, ignore_license=ignore_license, response=response)
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 1312, in _modify
self._ldap_pre_modify()
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/groups/group.py", line 470, in _ldap_pre_modify
self.check_ad_group_type_change()
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/groups/group.py", line 927, in check_ad_group_type_change
raise univention.admin.uexceptions.adGroupTypeChangeGlobalToDomainLocal
adGroupTypeChangeGlobalToDomainLocal
08.01.2020 14:15:12.761 LDAP (PROCESS): sync to ucs: Resync rejected dn: CN=Guests,CN=Builtin,DC=cevo,DC=de
08.01.2020 14:15:12.785 LDAP (PROCESS): sync to ucs: [ group] [ modify] u'cn=guests,cn=builtin,dc=cevo,dc=de'
08.01.2020 14:15:12.977 LDAP (ERROR ): Unknown Exception during sync_to_ucs
08.01.2020 14:15:12.978 LDAP (ERROR ): Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1555, in sync_to_ucs
result = self.modify_in_ucs(property_type, object, module, position)
File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1299, in modify_in_ucs
res = ucs_object.modify(serverctrls=serverctrls, response=response)
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 651, in modify
dn = self._modify(modify_childs, ignore_license=ignore_license, response=response)
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/__init__.py", line 1312, in _modify
self._ldap_pre_modify()
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/groups/group.py", line 470, in _ldap_pre_modify
self.check_ad_group_type_change()
File "/usr/lib/python2.7/dist-packages/univention/admin/handlers/groups/group.py", line 918, in check_ad_group_type_change
raise univention.admin.uexceptions.adGroupTypeChangeLocalToAny
adGroupTypeChangeLocalToAny
Leider führt ganz besonders der Reject der Grupper Guests noch zu einem weiteren Problem. Undzwar läuft Samba nach einem Neustart einfach so lange nicht, bis ich in der Samba DB die beiden Member aus der Gruppe entferne. Nach einem Neustart von Samba läuft dann alles wieder. Der Reject bleibt aber.
Kann jemand helfen?
Gruß,
Charly