Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen der Seite angezeigt.

--- prebuilt_systems:ucs:failed_to_re-index_objectsid_sambadb [2023/12/26 12:47] – angelegt loma
+++ prebuilt_systems:ucs:failed_to_re-index_objectsid_sambadb [2025/05/18 09:22] (aktuell) – loma
@@ Zeile 1: / Zeile 1: @@
 ====== Failed to re-index objectSid (SambaDB) ======
+You would like to show your appreciation for our help 8-o. Gladly. 🙏 We thank you for your donation!
+[[https://www.paypal.com/donate/?hosted_button_id=JTFYJYVH37MNE|{{:virtualisierung:proxmox_kvm_und_lxc:btn_donate_lg.gif|}}]] \\
+\\
+Freely available [[:apt-repository|Apt-Repository]]
+\\
+GITLAB: [[https://git.osit.cc|{{:gitlab_logo.png?nolink&60|}}]]
+\\
+\\
 Failed to re-index objectSid in a non ucs@school environment, may happen if you add a user.
@@ Zeile 27: / Zeile 37: @@
 ===== Investigation: =====
-The message indicates, that the SID, samba would like to give, is already occupied by an other userobject.
+The message indicates, that the SID, samba would like to give, is already occupied by an other userobject. To find out, you can check the ‘Rid Set’ of the server.
-To find out, you can check the ‘Rid Set’ of the server.
 <code bash>
@@ Zeile 36: / Zeile 45: @@
 rIDAllocationPool rIDNextRID
 </code>
-dn: CN=RID Set,CN=MASTER,OU=Domain Controllers,DC=schein,DC=ig
+dn: CN=RID Set,CN=MASTER,OU=Domain Controllers,DC=schein,DC=ig \\
-rIDNextRID: **1161**
+rIDNextRID: **1161** \\
-The attribute rIDNextRID shows the last successfully given RID.
+The attribute rIDNextRID shows the last successfully given RID. Now you can check if this RID (should ) and the next following RID (should not ) (be)/is used. \\
-Now you can check if this RID (should ) and the next following RID (should not ) (be)/is used.
+Take the SID from an other user or extract the Domain SID part:
-Take the SID from an other user or extract the Domain SID part:
 	univention-ldapsearch -xLLL sambaDomainName=* sambaSID | sed -ne 's|sambaSID: ||p'
@@ Zeile 47: / Zeile 55: @@
 	univention-ldapsearch -LLL sambaSID=S-1-5-21-2438365080-1175145288-4246282840-1161 dn
-dn: uid=b.baumann,cn=users,dc=schein,dc=ig :heavy_check_mark:
+dn: uid=b.baumann,cn=users,dc=schein,dc=ig -> OK
+	univention-ldapsearch -LLL sambaSID=S-1-5-21-2438365080-1175145288-4246282840-1162 dn
+dn: uid=l.croft,cn=users,dc=schein,dc=ig -> NOK \\
+The user l.croft already occupies the rid, which should be next in samba’s opinion. So this is the cause of the ‘“constraint violation”’ from.  \\
+===== Solution: =====
+Edit the ‘Rid Set’ in samba to the last successfully used RID.
+	ldbedit -H /var/lib/samba/private/sam.ldb CN="RID Set" -b CN="$(ucr get hostname),OU=Domain Controllers,$(ucr get ldap/base)"
+<code bash>
+# editing 1 records
+# record 1
+dn: CN=RID Set,CN=MASTER,OU=Domain Controllers,DC=schein,DC=ig
+objectClass: top
+objectClass: rIDSet
+cn: RID Set
+instanceType: 4
+whenCreated: 20190514144243.0Z
+whenChanged: 20190514144243.0Z
+uSNCreated: 3667
+uSNChanged: 3667
+showInAdvancedViewOnly: TRUE
+name: RID Set
+objectGUID: 993ec2b2-c611-4cb4-8924-781111a47832
+rIDAllocationPool: 1100-1599
+rIDPreviousAllocationPool: 1100-1599
+rIDUsedPool: 0
+objectCategory: CN=RID-Set,CN=Schema,CN=Configuration,DC=schein,DC=ig
+rIDNextRID: 1162
+distinguishedName: CN=RID Set,CN=MASTER,OU=Domain Controllers,DC=schein,DC=ig
+</code>
+Source: https://help.univention.com/t/problem-failed-to-re-index-objectsid-non-school/16853