gab2contacts with univention not syncing LDAP Kopano contacts

Manfred

Hi Andy,

did you apply fixes from https://jira.z-hub.io/browse/ZP-1401 after updating to Z-Push 2.4.1?

Could you add this line in gab2contacts/lib/kopano.php right after or before $created++; (it should be around line 260):

print_r($entry);

Manfred

raceface2nd

Hi Manfred,

yes I applied the fix before. Please find below the output of 2 runs directly after another:
root@mail2:/usr/share/z-push/tools/gab2contacts# ./gab2contacts.php -a sync

Array
(
    [268370178] => ▒!▒P@▒▒H▒▒S0D%NjBkNjEyZjgtZGI3My0xMDM3LTgwYWEtOTNjZTFmZjUxNzI0
    [973078558] =>
    [973471754] => -2147221233
    [974192670] => neuer1
    [974716938] => -2147221233
    [974520330] => -2147221233
    [974585866] => -2147221233
    [972947486] =>
    [973602826] => -2147221233
    [975372298] => -2147221233
    [974454794] => -2147221233
    [975831050] => -2147221233
    [975699978] => -2147221233
    [975634442] => -2147221233
    [974913546] => -2147221233
    [973668362] => -2147221233
    [975241226] => -2147221233
    [-1935802358] => -2147221233
    [974127114] => -2147221233
    [956628995] => 6
    [805371934] =>
    [1738997770] => -2147221233
)
Array
(
    [268370178] => ▒!▒P@▒▒H▒▒S0D%NjQ1N2ZkZWMtZGI3My0xMDM3LTgwYWItOTNjZTFmZjUxNzI0
    [973078558] =>
    [973471754] => -2147221233
    [974192670] => neuer2
    [974716938] => -2147221233
    [974520330] => -2147221233
    [974585866] => -2147221233
    [972947486] =>
    [973602826] => -2147221233
    [975372298] => -2147221233
    [974454794] => -2147221233
    [975831050] => -2147221233
    [975699978] => -2147221233
    [975634442] => -2147221233
    [974913546] => -2147221233
    [973668362] => -2147221233
    [975241226] => -2147221233
    [-1935802358] => -2147221233
    [974127114] => -2147221233
    [956628995] => 6
    [805371934] =>
    [1738997770] => -2147221233
)
Sync - Objects in GAB: 8 - in folder (before run): 5 - created: 2 - updated: 0 - deleted: 0 - untouched: 5 - ignored: 1

root@mail2:/usr/share/z-push/tools/gab2contacts# ./gab2contacts.php -a sync
Array
(
    [268370178] => ▒!▒P@▒▒H▒▒S0D%NjQ1N2ZkZWMtZGI3My0xMDM3LTgwYWItOTNjZTFmZjUxNzI0
    [973078558] =>
    [973471754] => -2147221233
    [974192670] => neuer2
    [974716938] => -2147221233
    [974520330] => -2147221233
    [974585866] => -2147221233
    [972947486] =>
    [973602826] => -2147221233
    [975372298] => -2147221233
    [974454794] => -2147221233
    [975831050] => -2147221233
    [975699978] => -2147221233
    [975634442] => -2147221233
    [974913546] => -2147221233
    [973668362] => -2147221233
    [975241226] => -2147221233
    [-1935802358] => -2147221233
    [974127114] => -2147221233
    [956628995] => 6
    [805371934] =>
    [1738997770] => -2147221233
)
Sync - Objects in GAB: 8 - in folder (before run): 6 - created: 1 - updated: 0 - deleted: 0 - untouched: 6 - ignored: 1

Andy

Manfred

Hi Andy,

when you’re creating a contact, aren’t you required to also enter username, not only last name? I have no idea how it works in the UCS, in the LDAP on my test system kopano-contacts do have this attribute.

Manfred

raceface2nd

Hi Manfred, there are 2 types of GAB contacts. 1st are users that require a username and a primary email address and additional 2nd there is an extra option provided by Kopano4UCS where you can add contacts to the GAB like business contacts where only the last name is required. This option can be found under the main option domain in UCS. Users are synched without any issues. The problem is with contacts.

Andy

Manfred

Hi Andy,

it’s a problem that the contacts don’t have a separate username, only the last name. The script uses the username field to check if this entry was already synced. The easiest workaround would be if you would add a unique value as a username for the contacts as well.

Manfred

raceface2nd

Hi Manfred,

that explains why the sync is not working. Unfortunately there is no option in the Kopano4UCS LDAP contacts to enter a user name. The only option is a displayname which does not seem to be the same like the username.

0_1524664079035_428651c8-7a09-4d4f-9c8c-963e1401a7ac-image.png

It looks like that this displayname is stored in a different way in the LDAP by Kopano4UCS so it is not synched into the GAB. Maybe @fbartels knows more about the workflow behind the sync of these contacts into the GAB?

The Kopano4UCS LDAP contacts are stored in the LDAP scheme like in following screenshot.
0_1524664564092_1190d032-69ef-4de9-8f80-ade77d9268db-image.png

Regards!

Andy

Manfred

Hi Andy,

what values are in the objectClass property of a contact?

Manfred

raceface2nd

Hi Manfred,

please find a screenshot with the expanded objectClass below:

0_1524691438996_4c5983cf-7d88-4629-9377-fd497394a5cb-image.png

Andy

Manfred

Hi Andy,

I’ve created a new kopano-contact in my LDAP using just person, inetOrgPerson, top and kopano-contact classes, but it still got the accountname field set. I’m out of ideas now, so I guess we’ll have to wait if Felix has any idea (he’s currently out of the office until mid of next week) what’s different in the UCS’ LDAP.

Manfred

raceface2nd

Hi Manfred,

Okay, let’s wait then.

Andy

fbartels

I just did a quick check on my univention system and I don’t see the duplication of objects when running gab2contacts again.

My contact looks as followed:

dn: cn=First Last,cn=contacts,cn=kopano,dc=univention,dc=de
kopanoAccount: 1
cn: First Last
objectClass: person
objectClass: inetOrgPerson
objectClass: kopano-contact
objectClass: kopano4ucsObject
objectClass: top
objectClass: univentionObject
univentionObjectType: kopano/contact
kopanoHidden: 0
univentionObjectFlag: functional
sn: Last
givenName: First
mailPrimaryAddress: mail@test.com

raceface2nd

Sorry for the radio silence have been busy out of office.
@fbartels : that’s kind of weird.

Is it correct, that there is no display name of the Kopano LDAP contacts displayed in the GAB?

0_1526294975336_e1a3cd52-e0a7-4142-8be2-fbda422b9a1d-grafik.png

0_1526295010074_fa7a6e41-5771-498b-bdb6-1075dbd9cce5-grafik.png

I recognized that I only have this behaviour of doubled entries when I create 2 or more LDAP entries at a time and run gab2contacts afterwards. When I only create 1 entry gab2contacts works like a charm with the mod from Manfred.

Andy

fbartels

I do have a display name configured on my system:

0_1526396275172_f01bfdf1-1ef7-4d5e-b480-15d79edccc81-image.png

But cn is actual the default value for the display name (as given in /usr/share/kopano/ldap.openldap.cfg), so I’m wondering why its empty for you.

raceface2nd

@fbartels : Unfortunately the display name stays empty independent how many kopano-contacts I create. Do you mean the ldap_fullname_attribute = cn entry in /usr/share/kopano/ldap.openldap.cfg?

Is there a way to readout the GAB entries with the command line?

fbartels

@raceface2nd said in gab2contacts with univention not syncing LDAP Kopano contacts:

Do you mean the ldap_fullname_attribute = cn entry in /usr/share/kopano/ldap.openldap.cfg?

No, user defined configuration should be placed into /etc/kopano (in this case into the ldap.cfg file).

@raceface2nd said in gab2contacts with univention not syncing LDAP Kopano contacts:

Is there a way to readout the GAB entries with the command line?

On univention there is ´univention-ldapsearch´. The following command lists all user objects (contacts are after all also user objects) that match the configured filter in Kopano:

univention-ldapsearch $(ucr get kopano/cfg/ldap/ldap_user_search_filter)

I don’t suppose you have a Kopano subscription, so one of our supporters could have a look on your system?

raceface2nd

@fbartels said in gab2contacts with univention not syncing LDAP Kopano contacts:

No, user defined configuration should be placed into /etc/kopano (in this case into the ldap.cfg file).

Don’t want to touch this file as it looks to me that it is how it has to be.

@fbartels said in gab2contacts with univention not syncing LDAP Kopano contacts:

I don’t suppose you have a Kopano subscription, so one of our supporters could have a look on your system?

Correct, I don’t have a subscription. Should I provide an SSH account for one of your supporters?

Andy

fbartels

@raceface2nd said in gab2contacts with univention not syncing LDAP Kopano contacts:

Should I provide an SSH account for one of your supporters?

You could get in contact with our sales team on an offer for remote help. This would probably resolve this issue (that we are already in the 30th reply and that is going on for a month) within a few minutes.

https://kopano.com/contact/

If this is nothing you want to do, i’d recommend to setup another Univention in a test environment and compare configuration files.

raceface2nd

Okay, thanks for your help until this point! I will check with the sales team in the next days.

Andy

raceface2nd

I checked on another server that the display names of Kopano contacts are displayed correctly. Also my config files differ extremely. Maybe this is related to the fact that my UCS runs already some years.
We decided to leave it like it is right now and migrate to a new server in the next weeks.

Thx again!