.. A/D group Administration

[carlPjohnson]

.. now that 11 is out and we converted, we wanted to start moving some more folks over to scalix. In doing this it is essential to be able to admin groups from the A/D plugin. So I added the scalix mailbox attribute to an existing A/D group that has (2) current scalix users in it (syncd via A/D) and each and everytime the sync runs the darn thing will not add the members into the group. Thanks for your help in advance.

2006-12-22 14:41:40 INFO: ... 1 entries passed for add.curr
2006-12-22 14:41:40 INFO: ... 9 entries failed for add.curr
2006-12-22 14:41:40 INFO: ... 0 entries warned for add.curr
2006-12-22 14:41:40 STATUS: apply limit data against Scalix ...
2006-12-22 14:41:41 INFO: ... 0 entries passed for add.curr
2006-12-22 14:41:41 INFO: ... 0 entries failed for add.curr
2006-12-22 14:41:41 INFO: ... 0 entries warned for add.curr
2006-12-22 14:41:41 STATUS: apply modify data against Scalix ...
2006-12-22 14:41:41 INFO: ... 0 entries passed for modify.curr
2006-12-22 14:41:41 INFO: ... 0 entries failed for modify.curr
2006-12-22 14:41:41 INFO: ... 0 entries warned for modify.curr
2006-12-22 14:41:41 STATUS: apply limit data against Scalix ...
2006-12-22 14:41:41 INFO: ... 0 entries passed for modify.curr
2006-12-22 14:41:41 INFO: ... 0 entries failed for modify.curr
2006-12-22 14:41:41 INFO: ... 0 entries warned for modify.curr
2006-12-22 14:41:41 STATUS: apply membadd data against Scalix ...
Enter CAA Password: --------> Sending SOAP Request to Ubermanager@http://scalix.
rcp.local/caa/ for method:AddMembersToGroup
--------> Received SOAP Response from Ubermanager@http://scalix.rcp.local/caa/
error: Response contains failure report
>>>>>>>>SOAP Request
SOAP part:
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Header/>
<SOAP-ENV:Body>
<scalix-caa:CAARequestMessage xmlns:scalix-caa="http://www.scalix.com/ca
a">
<ServiceType>scalix.res</ServiceType>
<Credentials id="12345">
<Identity name="sxadmin" passwd="xxxxxxxx"/>
</Credentials>
<FunctionName>AddMembersToGroup</FunctionName>
<AddMembersToGroupParameters id="E3r5XV3UV0yJlczkuAQN4A==">
<member fa="CN=Tony L. Freestone,OU=Billings\, MT,OU=Users,OU=RC
P,DC=rcp,DC=local"/>
<member fa="CN=Carl P. Johnson,OU=Billings\, MT,OU=Users,OU=RCP,
DC=rcp,DC=local"/>
</AddMembersToGroupParameters>
</scalix-caa:CAARequestMessage>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
>>>>>>>>SOAP Response
SOAP part:
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Body>
<SOAP-ENV:Fault>
<faultcode>SOAP-ENV:Server</faultcode>
<faultstring>CAA Service Error</faultstring>
<detail>
<scalix-caa:fault-details xmlns:scalix-caa="http://www.scalix.co
m/caa">
<message>Failed to obtain CN, MailNode for all the members i
n the Request SOAP Document from LDAP server scalix.rcp.local</message>
<errorcode>UM-1019</errorcode>
</scalix-caa:fault-details>
</detail>
</SOAP-ENV:Fault>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
0 entries passed
1 entries failed
0 entries warned
2006-12-22 14:41:43 ERROR: failed to run omldapagent
2006-12-22 14:41:43 INFO: ... 0 entries passed for member.curr
2006-12-22 14:41:43 INFO: ... 1 entries failed for member.curr
2006-12-22 14:41:43 INFO: ... 0 entries warned for member.curr
2006-12-22 14:41:43 STATUS: apply membmodify data against Scalix ...
2006-12-22 14:41:43 INFO: ... 0 entries passed for member.curr
2006-12-22 14:41:43 INFO: ... 0 entries failed for member.curr
2006-12-22 14:41:43 INFO: ... 0 entries warned for member.curr
2006-12-22 14:41:43 STATUS: update sync data files with partial results ...
2006-12-22 14:41:43 INFO: ... 1 entries added to search.last
2006-12-22 14:41:43 STATUS: LDAP dir sync import failed, error=2 ###########
2006-12-22 14:41:43 STATUS: LDAP dir sync export RCP_AD started ###############
2006-12-22 14:41:43 STATUS: load all records from scalix.rcp.local ...
2006-12-22 14:41:43 INFO: agreement type 11 only supports import operation
2006-12-22 14:41:43 STATUS: LDAP dir sync export RCP_AD completed #############

[Derek]

Looks to me like you didn't set the mailnode attribute for both users.

[ScalixSupport]

The problem was due to the escaped comma in the OU being passed to the FOREIGN-ADDR field with the \. To properly sync without the backslash modify the sync.cfg. Edit this value:

distinguishedName|FOREIGN-ADDR|*,1,512|*

to and make it read:

distinguishedName|FOREIGN-ADDR|*,1,512|!REPLACE=\134,|,

This will create all new entries in the scalix directory so that they do not have a \, in their foreign-addr field.

The next step is to correct all current directory entries. Take the output from

omsearch -s -m cn/foreign-addr

and massage it to:

ommodent -e "CN=First Last" -n "FOREIGN-ADDR=CN\=First Last,OU\=Billings, MT,OU\=Users,OU\=RCP,DC\=rcp,DC\=local"

and users will then be added to groups.

Regards,
Don