Re: group issues

[Rich Megginson <rmeggins@xxxxxxxxxx>]

On 12/13/2013 10:43 AM, Alberto Viana wrote:

Rich,

The behavior is a little bit different and I will try to explain:

version: 389-Directory/1.2.11.25 B2013.347.1221

389DS <--> Windows 2008 R2

Name of group: GSG_TESTE

Included a lot of users on this group, including this user:

DN of the user on windows: CN=Alberto Viana,OU=TESTE,DC=homolog,DC=rnp

DN  of the user on 389DS: uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp

What I did:

Changeg the OU of the user via windows to:

NEW DN: CN=Alberto Viana,OU=NEW,DC=homolog,DC=rnp

What happenned:

Did not deleted all users from the group.

389DS moved correctly the user to new DN: uid=alberto.viana,ou=NEW,dc=homolog,dc=rnp

389DS Added this new uid (uid=alberto.viana,ou=NEW,dc=homolog,dc=rnp) to group, but keep the old entry too (uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp).

Whe I remove the old entry manually (uid=alberto.viana,ou=TESTE,dc=homolog,dc=rnp) from the group, 389 DS deletes all users from the group on both sides (389DS and windows)

Do need any specific information? should I file a ticket?

Yes.

I also have a third 389DS running version 1.3.2.6 with a similar behavior to 1.2.10.12 (as I described in my first email)

On Thu, Dec 12, 2013 at 5:26 PM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:

On 12/12/2013 12:15 PM, Alberto Viana wrote:

Rich,

but in my case, the new OU is not ou of my scope. The sync deleted all of my users from my group (I think that I didnt make myself clear enough and you thought that users were deleted from 389DS) on both sides and just keep the user that I changed from windows side. 

So just make sure that you can undestand my problem. I Have a group named GRP_TEST and in this group i have a lot of users. When I change the OU of one of theses users, the sync delete all users from this group oh both sides (windows and 389DS) and just keep the user that I modified the OU.

Am I clear enough?

Yes.  If you can reproduce the issue with 1.2.11, please file a ticket.

Thanks

On Thu, Dec 12, 2013 at 5:02 PM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:

On 12/12/2013 11:55 AM, Alberto Viana wrote:

I found the root cause, it's happens when I change a user from one OU to another on my windows side.

Is that an expected behavior?

sounds like https://fedorahosted.org/389/ticket/355

On Thu, Dec 12, 2013 at 3:47 PM, Alberto Viana <albertocrj@xxxxxxxxx> wrote:

I have 2 389 DS with multimaster replicaton and one of them replicating (multimaster) with my AD server

389DS2 <--> 389DS1 <--> ADServer

389-Directory/1.2.10.12

AD Server 2008 R2

With 2 specific groups, for some reason that could not identify in my logs, all members are deleted (i'm not sure if the root cause is the 389DS or my AD). 

Can someone take a look on my log file and point me what is going on?

I dont want to send my log to the list because that a lot of information of my users. Can I send direct to someone?

Thanks a lot

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users