Hello,
after renaming a user we noticed, that this user was not able to login. He can still logon to Kopano WebApp, but has no access to the windows logon and file server.
The UCS Systemdianose tells about a S4-Reject and an error within UDN-Replikation.
What i did:
univention-s4connector-list-rejected
UCS rejected
S4 rejected
1: S4 DN: CN=Rainer Unsinn,OU=Benutzer,DC=domain,DC=local
UCS DN: uid=r.unsinn,ou=benutzer,dc=domain,dc=local
last synced USN: 723449
/usr/share/univention-s4-connector/remove_s4_rejected.py "CN=Rainer Unsinn ,OU=Benutzer,DC=domain,DC=local"
The rejected S4 object CN=Rainer Unsinn,OU=Benutzer,DC=domain,DC=local has been removed.
univention-ldapsearch -b "uid=r.hat-geheiratetk,ou=Benutzer,dc=domain,dc=local"
# extended LDIF
#
# LDAPv3
# base <uid=r.hat-geheiratet,ou=Benutzer,dc=damain,dc=local> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
# r.hat-geheiratet, Benutzer, damin.local
dn: uid=r.hat-geheiratet,ou=Benutzer,dc=domain,dc=local
kopanoAccount: 1
uidNumber: 2039
.....
univention-s4search -b uid=r.hat-geheiratet,ou=Benutzer,dc=domain,dc=local
search error - LDAP error 32 LDAP_NO_SUCH_OBJECT - <00002030: No such Base DN: uid=r.hat-geheiratet,ou=Benutzer,dc=domain,dc=local>
/usr/share/univention-s4-connector/resync_object_from_ucs.py --filter uid=r.hat-geheiratat,ou=Benutzer,dc=domain,dc=local
No matching objects.
That’s strange… So i try to figure out, what’s the problem about UDM
/usr/lib/nagios/plugins/check_univentlication
CRITICAL: no change of listener transaction id for last 0 checks (nid=Error: [Errno 111] Connection refused lid=1630663)
systemctl restart univention-directory-notifier
systemctl restart univention-directory-listener
sv status univention-directory-listener | sed -n 's/:.*//p'
run
sv status univention-directory-notifier | sed -n 's/:.*//p'
run
tail -f /var/log/univention/notifier.log
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
usage: univention-translog ldap [-h] tid [tid ...]
univention-translog ldap: error: argument tid: invalid int value: ''
Traceback (most recent call last):
File "/usr/share/univention-directory-notifier/univention-translog", line 1406, in <module>
exit(main())
File "/usr/share/univention-directory-notifier/univention-translog", line 420, in main
return opt.func(opt) or 0
File "/usr/share/univention-directory-notifier/univention-translog", line 464, in import_all
with Index(opt.translog_file) as index, Translog(opt.translog_file, index) as translog, ldapi(opt) as ld:
File "/usr/share/univention-directory-notifier/univention-translog", line 147, in __enter__
assert reminder == 0, reminder
AssertionError: 2
tail -f /var/log/univention/listener.log
27.04.20 11:56:01.369 LISTENER ( ERROR ) : failed to connect to any notifier
27.04.20 11:56:01.369 LISTENER ( WARN ) : can not connect any server, retrying in 30 seconds
27.04.20 11:56:31.369 LISTENER ( WARN ) : Notifier/LDAP server is server.domain.local:7389
27.04.20 11:56:31.369 LDAP ( PROCESS ) : connecting to ldap://server.domain.local:7389
27.04.20 11:56:31.371 LDAP ( INFO ) : simple_bind as cn=admin,dc=domain,dc=local
27.04.20 11:56:31.372 LISTENER ( INFO ) : connecting to notifier server.domain.local:6669
27.04.20 11:56:31.372 LISTENER ( INFO ) : connection to 192.168.120.87 failed with errorcode 111: Connection refused
27.04.20 11:56:31.372 LISTENER ( INFO ) : connection to 192.168.120.87 failed with errorcode 111: Connection refused
27.04.20 11:56:31.372 LISTENER ( ERROR ) : failed to connect to any notifier
27.04.20 11:56:31.372 LISTENER ( WARN ) : can not connect any server, retrying in 30 seconds
So i set the machine password, as described here: Problem: Unable to (re-)join: 03univention-directory-listener.inst failed
The [MDB_MAP_FULL] is at 72%. But that all, did not fix the problems.
The renamed user can still not login. After changing the password for another user, he also can’t login.
Any suggestions?
Best regards
Andre