Homepage | Products | OX Knowledge Base | Support | Try Now | Contact | Company
OX Logo
Results 1 to 8 of 8
  1. #1
    Join Date
    Mar 2010
    Location
    Winden, Germany
    Posts
    10

    Default error syncing access-combination after upgrading to 6.16 ....

    hi,

    after upgrading our open-xchange installation to version 6.16 the access-combination attribute won't be synced anymore. by reverting to the 6.14 snapshot the problem was gone, after applying the update again the problem occoured again. we're using the latest and unmodified version of oxldapsync.

    when checking the access-combination by the getaccesscombination command the output is <NONE>.

    any idea's ?

    best regards
    lars

  2. #2
    Carsten Hoeger is offline Open-Xchange Professional Services
    Join Date
    Mar 2007
    Posts
    703

    Default

    Could you please be a little more specific?
    OXpedia.org - the answer to almost all questions.

  3. #3
    Join Date
    Mar 2010
    Location
    Winden, Germany
    Posts
    10

    Thumbs up

    okay,

    we've recently updated our ox 6.14 installation to 6.16. after upgrading, the ldap syncronisation seemed to work fine except for the access-combination settings. when changing the ldap attribute for a user's access-combination the settings aren't synced to the ox server. when i issue an getaccesscombinationbyuser command for the changed user-account i get an access-combination name of <NONE>. looking at the logfiles i got a lot of the following messages :

    2010/04/02 14:15:06 > /opt/open-xchange/sbin/changeuser .......
    Server response:
    Primary mail address already exists in this context.

    It seems that the changeuser command changed it's behavior between ox 6.14 and 6.16, thus it checks if the primary email address in the changeuser command already exists. if this is the case it drops the corresponding "Primary email address already exists in this contest" error message.

    A snapshot of our old 6.14 installation worked fine without dropping these errors.

    our ldapsync.conf settings :

    ldapuri = ldap://*****
    vardirectory = /var/opt/oxldapsync
    oxpath = /opt/open-xchange/sbin
    logfile = /var/log/oxldapsync.log
    userbasedn = *****
    groupbasedn = *****
    ldapuserdn = *****
    ldapuserpassword = *****
    mappingfile = /opt/oxldapsync/etc/mapping.openldap.conf
    ldaptype = openldap
    updateGroups = yes
    usemodifytimestamp = no
    updateemptyattributes = yes
    userFilter =
    groupFilter =
    userignorefilter =
    updateAliases = yes
    deleteusers = yes
    deletegroups = yes
    uidAttribute = uid
    dontModifyUids = admin
    groupMemberAttribute = member
    memberAttributeIsDN = yes
    groupNameAttribute = cn
    groupDisplayNameAttribute = displayName
    groupNumberAttribute = gidNumber
    userPrimaryGroupAttribute = gidNumber

    Greetings
    lars

  4. #4
    Carsten Hoeger is offline Open-Xchange Professional Services
    Join Date
    Mar 2007
    Posts
    703

    Default

    • Accesscombination names cannot be used when using oxldapsync because it is setting the accesscombinations individually, check /opt/oxldapsync/etc/mapping.<YOURUSEDMAPPING>.conf
      Code:
      /opt/open-xchange/sbin/getaccesscombinationnameforuser -A oxadmin -P secret -u test -c 1
      null
    • The other problem is, that you gave a user the same primary mail address another user already has. That's not possible with open-xchange.
    OXpedia.org - the answer to almost all questions.

  5. #5
    Join Date
    Mar 2010
    Location
    Winden, Germany
    Posts
    10

    Default

    hi,

    1) good to know
    2) the error message occurs with all our synced users not only one or two of them. the changeuser script is called with all needed parameters for the ox user including it's email address. the new changeuser script seems to check the email address and prevents changing the user even if there's no other user having the given primary email address.

    greetings
    lars

  6. #6
    Carsten Hoeger is offline Open-Xchange Professional Services
    Join Date
    Mar 2007
    Posts
    703

    Default

    You are right.
    I am able to reproduce that.
    Going to open a bug.
    OXpedia.org - the answer to almost all questions.

  7. #7
    Carsten Hoeger is offline Open-Xchange Professional Services
    Join Date
    Mar 2007
    Posts
    703

  8. #8
    Join Date
    Mar 2010
    Location
    Winden, Germany
    Posts
    10

    Default

    thanks and keep up the good work ;-)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •