Warning: Manual: Multiple members for UID on UCS 5

[SirTux]

Since upgrading to UCS 5 I get warnings like this in the system diagnostic module:

Warning: Manual: Multiple members for UID 'Administrator' of group 'cn=Domain Admins,cn=groups,dc=top,dc=top1`

In the LDAP I can find entries as described here:

Fix broken group membership

Problem: You might end up in a situation where a user seems to be part of a group even you just removed it. When trying to fix the group membership you’re told memberUid: no such value. A deeper look: When looking closer at the group objects the user is supposed to be in, you discover that there are two attributes determining the group membership, memberUid and uniqueMember. While memberUid doen’t list the user in question, uniqueMember does. Solution: You need to remove the attribute uniqu…

This should be fixed by running the script /usr/share/univention-directory-manager-tools/proof_uniqueMembers. Unfortunately this doesn’t work. The script doesn’t throws any error either.

[support_ti]

Have you found a solution for that ?

Ive got this error : Check LDAP database for inconsistencies in group memberships and it said to run this command

You can run /usr/share/univention-directory-manager-tools/proof_uniqueMembers to fix the issue.

But it don’t seem to fix anything

Thanks !

[SirTux]

No I’ve just ignored it. But I would be interested in a solution too.

[dzidek23]

In another post you’ve mentioned you are running one Admin account. If there are any errors with your permissions, wouldn’t it prevent the fix from working?

Note, the fix that has been mentioned Fix broken group membership is run as root and not admin.

Addendum:
You seem to have lots of problems with your system. At the moment, you are playing whack-a-mole trying to fix small annoying issues but it looks like something else is broken. Take a backup of your system and check all things linked to LDAP.

[support_ti]

Well im running with my Domain Admin account when logging in in UCS web interface so everything should work fine.

When you say check all things linked to ldap can you be more precise on what to check because in the web interface there is not much to check

I can browse the ldap directory without problem

If i create a new user in my Domain i can see it in the ldap directory and if i delete it it’s delete in the ldap directory also

Not sure what to check

Thanks !