UCS-S4-Reject: Console Login


I have this S4-Reject:

UCS rejected

S4 rejected

    1:    S4 DN: CN=Console Logon,CN=Builtin,DC=company,DC=local
         UCS DN: cn=console logon,cn=builtin,dc=company,dc=local

	last synced USN: 445100

This is the log entry for the reject:

20.11.2019 12:48:35.036 LDAP        (ERROR  ): Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1553, in sync_to_ucs
    result = self.modify_in_ucs(property_type, object, module, position)
  File "/usr/lib/python2.7/dist-packages/univention/s4connector/__init__.py", line 1303, in modify_in_ucs
    res = ucs_object.modify(serverctrls=serverctrls, response=response)
  File "/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.py", line 649, in modify
    dn = self._modify(modify_childs, ignore_license=ignore_license, response=response)
  File "/usr/lib/pymodules/python2.7/univention/admin/handlers/__init__.py", line 1310, in _modify
  File "/usr/lib/pymodules/python2.7/univention/admin/handlers/groups/group.py", line 470, in _ldap_pre_modify
  File "/usr/lib/pymodules/python2.7/univention/admin/handlers/groups/group.py", line 928, in check_ad_group_type_change
    raise univention.admin.uexceptions.adGroupTypeChangeLocalToAny

Seems like Samba wants to set the AD group type to Global.
However, this seems to be impossible in UCS.
When I try it manually, I get this error in the UMC:

The LDAP object could not be saved: The AD group type can not be changed from type local to any other type.

So, I tried the other way around and set it in Samba to Local, but in the RSAT tools the “local”-box is grey and cannot be clicked.

In the Python source code I found this link for more information about this stuff:

Quite some information to digest … :frowning:

Any hints how to solve the reject?