Thursday, December 9, 2021

[389-users] Re: Help: Winsync Replica Unidirectorional fromWindows - Delete entries not working

> On 10 Dec 2021, at 06:14, Caderize Caderize <caderize@gmail.com> wrote:
>
> Hello,
> trying to delete an entry in AD configured winsync replication OneWay fromWindows.
> The synced entry has not been deleted also in DS389.
>
> This the error message:
> DEBUG - clcache_initial_anchorcsn - anchor is now: 61b26119000100010000
> [09/Dec/2021:21:04:03.381822400 +0100] - DEBUG - NSMMReplicationPlugin - changelog program - agmt="cn=AD2D389" (labdc1:636): CSN 61b26119000100010000 found, position set for replay
> [09/Dec/2021:21:04:03.407178341 +0100] - DEBUG - agmt="cn=AD2D389" (labdc1:636) - clcache_get_next_change - load=1 rec=1 csn=61b26132000000010000
> [09/Dec/2021:21:04:03.424657228 +0100] - DEBUG - NSMMReplicationPlugin - windows sync - windows_replay_update - agmt="cn=AD2D389" (labdc1:636) -Looking at delete operation local dn="uid=pluto.paperino,ou=Internal Users,ou=people,dc=lab,dc=com" (ours,user,not group)
> [09/Dec/2021:21:04:03.441053065 +0100] - DEBUG - NSMMReplicationPlugin - windows sync - map_entry_dn_outbound - agmt="cn=AD2D389" (labdc1:636) - Looking for AD entry for DS dn="nsuniqueid=12789181-592b11ec-8a489caa-30ef94f6,uid=pluto.paperino,ou=Internal Users,ou=people,dc=lab,dc=com" guid="d86ea71b3b9e2249844770275958e84b"
> [09/Dec/2021:21:04:03.457975212 +0100] - DEBUG - NSMMReplicationPlugin - windows sync - windows_search_entry_ext - Calling windows entry search request plugin
> [09/Dec/2021:21:04:03.477204880 +0100] - DEBUG - NSMMReplicationPlugin - windows sync - windows_search_entry_ext - Received 2 messages, 1 entries, 0 references
> [09/Dec/2021:21:04:03.492898116 +0100] - DEBUG - NSMMReplicationPlugin - windows sync - map_entry_dn_outbound - agmt="cn=AD2D389" (labdc1:636) - Return code 0 from search for AD entry dn="<GUID=d86ea71b3b9e2249844770275958e84b>" or dn="CN=Pluto Paperino,CN=D389Sync,DC=lab,DC=local"
> [09/Dec/2021:21:04:03.509304473 +0100] - ERR - NSMMReplicationPlugin - windows sync - windows_replay_update - agmt="cn=AD2D389" (labdc1:636) - Failed map dn for delete operation dn="uid=pluto.paperino,ou=Internal Users,ou=people,dc=lab,dc=com" rc=-1 remote_dn = [(null)]
> [09/Dec/2021:21:04:03.526216140 +0100] - DEBUG - agmt="cn=AD2D389" (labdc1:636) - clcache_adjust_anchorcsn - agmt="cn=AD2D389" (labdc1:636) - (cscb 0 - state 1) - csnPrevMax (61b26132000000010000) csnMax (61b26132000000010000) csnBuf (61b26132000000010000) csnConsumerMax (61b26132000000010000)
>
> Any help would be appreciate...
>
> The Winsync Agreement has been also configured with:
> winSyncMoveAction: delete
> In the scenario when a user is moved far from scope, it has been successfully deleted.

I'm not seeing this error. It looks like it's searching for the GUID. Can you confirm if the AD recycle bin is enabled on your ADDC? What windows version and forest functional level are you using as well?


> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

--
Sincerely,

William Brown

Senior Software Engineer, Identity and Access Management
SUSE Labs, Australia
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

No comments:

Post a Comment