Re: [389-users] group issues

[Rich Megginson]

On 12/13/2013 10:43 AM, Alberto Viana wrote:

Rich,

The behavior is a little bit different and I will try to explain:
version: 389-Directory/1.2.11.25  B2013.347.1221

389DS <--> Windows 2008 R2

Name of group: GSG_TESTE

Included a lot of users on this group, including this user:

DN of the user on windows: CN=Alberto Viana,OU=TESTE,DC=homolog,DC=rnp
DN  of the user on 389DS: uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp

What I did:

Changeg the OU of the user via windows to:
NEW DN: CN=Alberto Viana,OU=NEW,DC=homolog,DC=rnp


What happenned:
Did not deleted all users from the group.
389DS moved correctly the user to new DN: 
uid=alberto.viana,ou=NEW,dc=homolog,dc=rnp
389DS Added this new uid (uid=alberto.viana,ou=NEW,dc=homolog,dc=rnp) 
to group, but keep the old entry too 
(uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp).


Whe I remove the old entry manually 
(uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp) from the group, 389 DS 
deletes all users from the group on both sides (389DS and windows)



Do need any specific information? should I file a ticket?

Yes.
I also have a third 389DS running version 1.3.2.6 with a similar 
behavior to 1.2.10.12 (as I described in my first email)



On Thu, Dec 12, 2013 at 5:26 PM, Rich Megginson > wrote:


On 12/12/2013 12:15 PM, Alberto Viana wrote:

Rich,

but in my case, the new OU is not ou of my scope. The sync
deleted all of my users from my group (I think that I didnt make
myself clear enough and you thought that users were deleted from
389DS) on both sides and just keep the user that I changed from
windows side.

So just make sure that you can undestand my problem. I Have a
group named GRP_TEST and in this group i have a lot of users.
When I change the OU of one of theses users, the sync delete all
users from this group oh both sides (windows and 389DS) and just
keep the user that I modified the OU.

Am I clear enough?


Yes.  If you can reproduce the issue with 1.2.11, please file a
ticket.




Thanks


On Thu, Dec 12, 2013 at 5:02 PM, Rich Megginson
mailto:rmegg...@redhat.com>> wrote:

On 12/12/2013 11:55 AM, Alberto Viana wrote:

I found the root cause, it's happens when I change a user
from one OU to another on my windows side.

Is that an expected behavior?

sounds like https://fedorahosted.org/389/ticket/355



On Thu, Dec 12, 2013 at 3:47 PM, Alberto Viana
mailto:alberto...@gmail.com>> wrote:

I have 2 389 DS with multimaster replicaton and one of
them replicating (multimaster) with my AD server

389DS2 <--> 389DS1 <--> ADServer

389-Directory/1.2.10.12 
AD Server 2008 R2


With 2 specific groups, for some reason that could not
identify in my logs, all members are deleted (i'm not
sure if the root cause is the 389DS or my AD).

Can someone take a look on my log file and point me what
is going on?

I dont want to send my log to the list because that a
lot of information of my users. Can I send direct to
someone?


Thanks a lot




--
389 users mailing list
389-us...@lists.fedoraproject.org  

https://admin.fedoraproject.org/mailman/listinfo/389-users



--
389 users mailing list
389-us...@lists.fedoraproject.org

https://admin.fedoraproject.org/mailman/listinfo/389-users




--
389 users mailing list
389-us...@lists.fedoraproject.org  

https://admin.fedoraproject.org/mailman/listinfo/389-users



--
389 users mailing list
389-us...@lists.fedoraproject.org

https://admin.fedoraproject.org/mailman/listinfo/389-users




--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users


--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Re: [389-users] group issues

[Alberto Viana]

Rich,

but in my case, the new OU is not ou of my scope. The sync deleted all of
my users from my group (I think that I didnt make myself clear enough and
you thought that users were deleted from 389DS) on both sides and just keep
the user that I changed from windows side.

So just make sure that you can undestand my problem. I Have a group named
GRP_TEST and in this group i have a lot of users. When I change the OU of
one of theses users, the sync delete all users from this group oh both
sides (windows and 389DS) and just keep the user that I modified the OU.

Am I clear enough?

Thanks


On Thu, Dec 12, 2013 at 5:02 PM, Rich Megginson  wrote:

>  On 12/12/2013 11:55 AM, Alberto Viana wrote:
>
> I found the root cause, it's happens when I change a user from one OU to
> another on my windows side.
>
>  Is that an expected behavior?
>
> sounds like https://fedorahosted.org/389/ticket/355
>
>
>
>  On Thu, Dec 12, 2013 at 3:47 PM, Alberto Viana wrote:
>
>> I have 2 389 DS with multimaster replicaton and one of them replicating
>> (multimaster) with my AD server
>>
>>  389DS2 <--> 389DS1 <--> ADServer
>>
>>  389-Directory/1.2.10.12
>>  AD Server 2008 R2
>>
>>
>>  With 2 specific groups, for some reason that could not identify in my
>> logs, all members are deleted (i'm not sure if the root cause is the 389DS
>> or my AD).
>>
>>  Can someone take a look on my log file and point me what is going on?
>>
>>  I dont want to send my log to the list because that a lot of
>> information of my users. Can I send direct to someone?
>>
>>
>>  Thanks a lot
>>
>
>
>
> --
> 389 users mailing 
> list389-users@lists.fedoraproject.orghttps://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>
> --
> 389 users mailing list
> 389-us...@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
--
389 users mailing list
389-us...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users