Re: [lsc-users] clean phase fails with "invalid attribute description"

2018-03-05 Thread Clément OUDOT 
2018-03-05 15:31 GMT+01:00 Nikos Asimos :
> Στις 02-Mar-18 12:14 PM, ο Clément OUDOT έγραψε:
>
> I think you should find another attribute.
>
> I followed your advice and replaced destinationIndicator with seeAlso in
> lsc.xml. After many tries with diofferent combination of attributes in the
> filters I keep getting the same following error messages. The scenario is
> that among 7 records, user 'ak' does not have a seeAlso attribute so LSC
> should tag it for deletion. Instead I get:
>
> Mar 05 16:17:50 - INFO  - Starting clean for CleanTask
> Mar 05 16:17:50 - ERROR - Error while looking for
> (seeAlso=CN=as,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
> in ou=People,dc=uth,dc=gr:
> javax.naming.directory.InvalidSearchFilterException: invalid attribute
> description; remaining name 'ou=People'


Hello,

the error seems to be from Active Directory. I don't know why, maybe
the DN value is not valid as it does not belong to AD tree.

Could you check OpenLDAP logs to be sure there is no error on this side?


Clément.
___
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-users@lists.lsc-project.org
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users

Re: [lsc-users] clean phase fails with "invalid attribute description"

2018-03-05 Thread Nikos Asimos 

  
  
Στις 02-Mar-18 12:14 PM, ο Clément
  OUDOT έγραψε:


  I think you should find another attribute.


I followed your advice
and replaced destinationIndicator with seeAlso in lsc.xml. After
many tries with diofferent combination of attributes in the
filters I keep getting the same following error messages. The
scenario is that among 7 records, user 'ak' does not have a
seeAlso attribute so LSC should tag it for deletion. Instead I
get:
Mar 05 16:17:50 - INFO  - Starting clean for CleanTask
Mar 05 16:17:50 - ERROR - Error while looking for
    (seeAlso=CN=as,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
    in ou=People,dc=uth,dc=gr:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Error while synchronizing ID
{seealso=CN=as,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr}:
org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Unable to delete object
CN=as,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr
(org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People')
Mar 05 16:17:50 - ERROR - Error while looking for
   
(seeAlso=CN=ageorgi,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
    in ou=People,dc=uth,dc=gr:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Error while synchronizing ID
{seealso=CN=ageorgi,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr}:
org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Unable to delete object
CN=ageorgi,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr
(org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People')
Mar 05 16:17:50 - ERROR - Error while looking for
   
(seeAlso=CN=atgiota,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
    in ou=People,dc=uth,dc=gr:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Error while synchronizing ID
{seealso=CN=atgiota,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr}:
org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Unable to delete object
CN=atgiota,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr
(org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People')
Mar 05 16:17:50 - ERROR - Error while looking for
   
(seeAlso=CN=assimos,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
    in ou=People,dc=uth,dc=gr:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Error while synchronizing ID
{seealso=CN=assimos,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr}:
org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Unable to delete object
CN=assimos,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr
(org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People')
Mar 05 16:17:50 - ERROR - Error while looking for
   
(seeAlso=CN=ckalant,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr)
    in ou=People,dc=uth,dc=gr:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Error while synchronizing ID
{seealso=CN=ckalant,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr}:
org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException: invalid
attribute description; remaining name 'ou=People'
Mar 05 16:17:50 - ERROR - Unable to delete object
CN=ckalant,OU=IT,OU=Adm,DC=ad,DC=uth,DC=gr
(org.lsc.exception.LscServiceException:
javax.naming.directory.InvalidSearchFilterException:

Re: [lsc-users] clean phase fails with "invalid attribute description"

2018-03-02 Thread Clément OUDOT 
2018-03-02 10:32 GMT+01:00 Nikos Asimos :
> Hello developers and list members!

Hello Nikos.


>
> Mar 02 11:00:12 - ERROR - Error while looking for
>
> (destinationIndicator=cn=ak,ou=Users,ou=TestOU,dc=ad,dc=uth,dc=gr)
> in ou=People,dc=uth,dc=gr:
> javax.naming.directory.InvalidSearchFilterException: invalid attribute
> description; remaining name 'ou=People'
> Mar 02 11:00:12 - ERROR - Error while synchronizing ID
> {destinationindicator=cn=ak,ou=Users,ou=TestOU,dc=ad,dc=uth,dc=gr}:
> org.lsc.exception.LscServiceException:
> javax.naming.directory.InvalidSearchFilterException: invalid attribute
> description; remaining name 'ou=People'
> Mar 02 11:00:12 - ERROR - Unable to delete object
> CN=ak,OU=Users,OU=TestOU,DC=ad,DC=uth,DC=gr
> (org.lsc.exception.LscServiceException:
> javax.naming.directory.InvalidSearchFilterException: invalid attribute
> description; remaining name 'ou=People')


Looking to 
https://stackoverflow.com/questions/15422034/active-directory-auth-getting-invalid-attribute-description#1542,
 I would say the value for destinationIndicator is not valid.

Indeed, this attribute is not designed to store DN, but IA5 string:
https://msdn.microsoft.com/en-us/library/ms675494%28v=vs.85%29.aspx

I think you should find another attribute.


Clément.
___
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-users@lists.lsc-project.org
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-users