Le 29/08/2012 20:01, Clément OUDOT a écrit :
> 2012/8/29 [email protected] <[email protected]>:
>> Le 28/08/2012 18:48, Clément OUDOT a écrit :
>>> 2012/8/28 [email protected] <[email protected]>:
>>>> Le 28/08/2012 12:16, Clément OUDOT a écrit :
>>>>> 2012/8/28 [email protected] <[email protected]>:
>>>>>> Hello,
>>>>>>
>>>>>> no ideas for this problem ?
>>>>>>
>>>>>
>>>>> Looks like your filter in the LDAP destination is not good, as your
>>>>> connector try to create an existing entry.
>>>>>
>>>>> Clément.
>>>>>
>>>>
>>>> Yes it try to create users which exists in ldap.
>>>>
>>>> My conf is like this :
>>>>
>>>> <ldapDestinationService>
>>>> <name>ldap-dst-service</name>
>>>> <connection reference="ldap-dst-conn" />
>>>> <baseDn>ou=People,dc=client1,dc=enterprise,dc=net</baseDn>
>>>> <pivotAttributes>
>>>> <string>uid</string>
>>>> </pivotAttributes>
>>>> <fetchedAttributes>
>>>> <string>cn</string>
>>>> <string>sn</string>
>>>> <string>givenName</string>
>>>> <string>userPassword</string>
>>>> <string>objectClass</string>
>>>> <string>uid</string>
>>>> <string>mail</string>
>>>> </fetchedAttributes>
>>>> <getAllFilter>(objectClass=inetOrgPerson)</getAllFilter>
>>>>
>>>> <getOneFilter>(&(objectClass=inetorgperson)(uid={uid}))</getOneFilter>
>>>> </ldapDestinationService>
>>>
>>>
>>> Please send LDAP logs.
>>>
>>
>> This is my ldap log when I run "lsc -s all"
>>
>>
>> conn=1000 fd=13 ACCEPT from IP=127.0.0.1:51356 (IP=0.0.0.0:389)
>> conn=1000 op=0 BIND dn="cn=admin,dc=entreprise,dc=net" method=128
>> conn=1000 op=0 BIND dn="cn=admin,dc=entreprise,dc=net" mech=SIMPLE ssf=0
>> conn=1000 op=0 RESULT tag=97 err=0 text=
>> conn=1000 op=1 SRCH base="ou=People,dc=client1,dc=entreprise,dc=net"
>> scope=2 deref=0 filter="(&(objectClass=inetOrgPerson)(uid={uid}))"
>> conn=1000 op=1 SRCH attr=cn sn givenName userPassword objectClass uid mail
>> <= bdb_equality_candidates: (uid) not indexed
>> conn=1000 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
>> conn=1000 op=2 SRCH base="ou=People,dc=client1,dc=entreprise,dc=net"
>> scope=2 deref=0 filter="(&(objectClass=inetOrgPerson)(uid={uid}))"
>> conn=1000 op=2 SRCH attr=cn sn givenName userPassword objectClass uid mail
>> <= bdb_equality_candidates: (uid) not indexed
>> conn=1000 op=2 SEARCH RESULT tag=101 err=0 nentries=0 text=
>> conn=1000 op=3 SRCH base="ou=People,dc=client1,dc=entreprise,dc=net"
>> scope=2 deref=0 filter="(&(objectClass=inetOrgPerson)(uid={uid}))"
>> conn=1000 op=3 SRCH attr=cn sn givenName userPassword objectClass uid mail
>> <= bdb_equality_candidates: (uid) not indexed
>> conn=1000 op=3 SEARCH RESULT tag=101 err=0 nentries=0 text=
>> conn=1000 op=4 SRCH base="ou=People,dc=client1,dc=entreprise,dc=net"
>> scope=2 deref=0 filter="(&(objectClass=inetOrgPerson)(uid={uid}))"
>> conn=1000 op=4 SRCH attr=cn sn givenName userPassword objectClass uid mail
>> <= bdb_equality_candidates: (uid) not indexed
>> conn=1000 op=4 SEARCH RESULT tag=101 err=0 nentries=0 text=
>> conn=1000 op=5 do_add: invalid dn
>> (uid=,ou=People,dc=client1,dc=entreprise,dc=net)
>> conn=1000 op=5 RESULT tag=105 err=34 text=invalid DN
>> conn=1000 op=6 ADD
>> dn="uid=david.cheramy,ou=People,dc=client1,dc=entreprise,dc=net"
>> conn=1000 op=6 RESULT tag=105 err=68 text=
>> conn=1000 op=7 ADD
>> dn="uid=jack.cheramy,ou=People,dc=client1,dc=entreprise,dc=net"
>> conn=1000 op=7 RESULT tag=105 err=68 text=
>> conn=1000 op=8 ADD
>> dn="uid=guillaume.cheramy,ou=People,dc=client1,dc=entreprise,dc=net"
>> conn=1000 op=8 RESULT tag=105 err=68 text=
>> conn=1000 fd=13 closed (connection lost)
>
>
> It looks like your "getOneFilter" in destination is not good. You
> should the source pivot attribute in it, not the destination pivot
> attribute.
>
> To get more details about the use of filters, read this comment:
> http://tools.lsc-project.org/issues/517#change-1838
>
> Clément.
>
Ok I understand. I change the pivot atribute and now It's works.
Thnaks for your help
--
''~``
( o o )
+------------------.oooO--(_)--Oooo.---------------------+
| Guillaume Chéramy - Guidtz |
| French open source system administrator |
| E-Mail : [email protected] |
| Website : http://blog.cheramy.name |
| |
| ( ) |
+---------------------\ (----( )-----------------------+
\_) ) /
(_/
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org
lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users
