when try to follow
S4-Connector Rejects
Rejects
You can use the following command to have a look at the current S4-Connector replication status:
univention-s4connector-list-rejected
If you see rejected objects in the output it is recommended to have a look at the relevant log files to determine the reason for the reject. The relevant log file is /var/log/univention/connector-s4.log.
UCS rejected refers to object modifications that have been detected in UCS/OpenLDAP and could not be synchronized to the Samba/AD …
i get this result
root@DC : ~ # univention-s4connector-list-rejected
UCS rejected
1: UCS DN: uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
S4 DN:
Filename: /var/lib/univention-connector/s4/1574055480.736443
2: UCS DN: uid=sharad.nigadikar,ou=LRM USERS,dc=lrm,dc=local
S4 DN:
Filename: /var/lib/univention-connector/s4/1574055504.950459
S4 rejected
1: S4 DN: CN=arsalan.ahmed,CN=Users,DC=lrm,DC=local
UCS DN: uid=arsalan.ahmed,ou=lrm users,dc=lrm,dc=local
last synced USN: 3990
root@DC : ~ # univention-ldapsearch -b “uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local”
extended LDIF
LDAPv3
base <uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local> with scope subtree
filter: (objectclass=*)
requesting: ALL
sachin.kumawat, LRM USERS, lrm.local
dn: uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
uid: sachin.kumawat
krb5PrincipalName: sachin.kumawat@LRM.LOCAL
objectClass: krb5KDCEntry
objectClass: person
objectClass: automount
objectClass: top
objectClass: inetOrgPerson
objectClass: krb5Principal
objectClass: organizationalPerson
objectClass: univentionPWHistory
objectClass: univentionMail
objectClass: univentionObject
objectClass: shadowAccount
objectClass: sambaSamAccount
objectClass: posixAccount
uidNumber: 2110
sambaAcctFlags: [U ]
sambaBadPasswordCount: 0
krb5MaxLife: 86400
cn: Sachin Kumawat
krb5MaxRenew: 604800
sambaBadPasswordTime: 0
description: Domain Users
loginShell: /bin/bash
univentionObjectType: users/user
krb5KDCFlags: 126
displayName: Sachin Kumawat
gecos: Sachin Kumawat
sn: Kumawat
homeDirectory: /home/sachin.kumawat
givenName: Sachin
gidNumber: 5001
sambaPrimaryGroupSID: S-1-5-21-2214381323-2062604513-4055384885-513
sambaNTPassword: 55FDD5CFC2AFD4CC1929D8812462CE37
shadowLastChange: 18031
sambaSID: S-1-5-21-2214381323-2062604513-4055384885-1223
userPassword:: e2NyeXB0fSQ2JGhKSjZvODRLYmE2a1AyeTAkQzRJdEVwN2FlbjFESEl2WXBSZUNzTDBkQm1kRTlYeEcuY0VDNlJZNlllQnRDQ1FhN0lJNC5NS0U1YkFWbTFBNElZTFl5WTFQTTk0LjR2eTZYUWFRTC8=
krb5Key:: MFGhKzApoAMCARKhIgQglYd26GGOg3wLSCd35SILosPEhkdfWdfpA8c0JFRMek6iIjAgoAMCAQOhGQQXTFJNLkxPQ0FMc2FjaGluLmt1bWF3YXQ=
krb5Key:: MEGhGzAZoAMCARGhEgQQS4MuZFa47bPVBdFZHCph9qIiMCCgAwIBA6EZBBdMUk0uTE9DQUxzYWNoaW4ua3VtYXdhdA==
krb5Key:: MEGhGzAZoAMCARehEgQQVf3Vz8Kv1MwZKdiBJGLON6IiMCCgAwIBA6EZBBdMUk0uTE9DQUxzYWNoaW4ua3VtYXdhdA==
krb5Key:: MDmhEzARoAMCAQGhCgQIxIPZgylMaJKiIjAgoAMCAQOhGQQXTFJNLkxPQ0FMc2FjaGluLmt1bWF3YXQ=
krb5Key:: MDmhEzARoAMCAQOhCgQIxIPZgylMaJKiIjAgoAMCAQOhGQQXTFJNLkxPQ0FMc2FjaGluLmt1bWF3YXQ=
krb5Key:: MDmhEzARoAMCAQKhCgQIxIPZgylMaJKiIjAgoAMCAQOhGQQXTFJNLkxPQ0FMc2FjaGluLmt1bWF3YXQ=
krb5Key:: MEmhIzAhoAMCARChGgQYSSrHs09rwa3WoTRoSZhe8tV/ij4sMeCMoiIwIKADAgEDoRkEF0xSTS5MT0NBTHNhY2hpbi5rdW1hd2F0
krb5KeyVersionNumber: 2
pwhistory: $6$leXuydkcy//1oaIP$9nukfnhVW8bSfJdDkWmtWW9c5pUkdewFZRxEX9BXoYFELwyCYNJwg4CoyoAkLutijQF1PJnUtZnU.DcsFyE9D1 $6$ILbYWRfyYxBQeXPZ$wJch6GOdRJshGHXF6waqlaKAXKE5xQ5CHDzGwAUQqDbjBekLCBJ.1xmK7v1frvyK868Tad6/c5CpYvHEzxcFb/
sambaPasswordHistory: 848BA86FDDEFF496C86830894AABA49BB9B33B8D4CA0EB2B96D88AF528EF684CC2D440616034721FCDA0CB772BA7E2F6B41AE6314B343800B40A859D8FFE4C59
sambaPwdLastSet: 1574055479
search result
search: 3
result: 0 Success
numResponses: 2
numEntries: 1
root@DC : ~ # /usr/share/univention-s4-connector/remove_ucs_rejected.py \
uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
Usage: remove_ucs_rejected.py dn
Options:
-h, --help show this help message and exit
root@DC : ~ # /usr/share/univention-s4-connector/resync_object_from_ucs.py --filter uid=sachin.kumawat
resync triggered for uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
root@DC : ~ # /usr/share/univention-s4-connector/resync_object_from_ucs.py --filter uid=sachin.kumawat resync triggered for uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
resync triggered for uid=sachin.kumawat,ou=LRM USERS,dc=lrm,dc=local
root@DC : ~ #