[lsc-users] issue with aSync groups with LSC 2.1 service

Massimo Ciancio massimo.ciancio at itech.it
Mon Nov 21 23:17:25 CET 2016



Hello 

I'm having so many problems in the async method by OpenLDAP to Active Directory, the first problem is the BUG http://tools.lsc-project.org/issues/715, and error repetition "ERROR - There is no future with Associated operation message ID XXXXX, perhaps the operation would have been completed ", to which I can not find answers. 
According to you what method should I use for a constant synchronization between OpenLDAP and Active Directory??? Synchronous task in crontab? 
Thank you in advance for your help. 




Massimo 


----- Messaggio originale -----

Da: "Sébastien Bahloul" <sebastien.bahloul at gmail.com> 
A: "Massimo Ciancio" <massimo.ciancio at itech.it> 
Cc: "lsc-users" <lsc-users at lists.lsc-project.org> 
Inviato: Venerdì, 14 ottobre 2016 13:05:14 
Oggetto: Re: [lsc-users] issue with aSync groups with LSC 2.1 service 

Hi Massimo, 

OK, so there is a need to fix the Timeout Exception to trigger a reconnection. I will look at that next week. 

Regards; 

Sebastien BAHLOUL 

2016-10-14 12:05 GMT+02:00 Massimo Ciancio < massimo.ciancio at itech.it > : 



Hi Sébastien 

Sending the information that can be useful: 

NETSTAT Result on OpenLDAP Server 



[root at ldap ~]# netstat -an |grep 389 
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 
tcp 0 0 :::389 :::* LISTEN 




[root at ldap ~]# netstat -an |grep 636 
tcp 0 0 0.0.0.0:636 0.0.0.0:* LISTEN 
tcp 0 0 192.168.1.10:636 192.168.1.50:57366 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57364 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:45788 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57362 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57340 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57338 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57344 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57370 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57368 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:57342 ESTABLISHED 
tcp 0 0 192.168.1.10:636 192.168.1.50:45792 ESTABLISHED 
tcp 0 0 :::636 :::* LISTEN 







On LSC Server: 




[root at lsc lsc] tail /var/log/lsc/lsc.log 
Oct 11 22:16:03 - INFO - Task Sync_Users confirmed running to JMX client ! 
Oct 12 07:24:01 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 07:50:00 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 07:50:30 - ERROR - LDAP error while reading entry cn=10936,ou=People,dc=lsc-project,dc=org (org.apache.directory.api.ldap.model.exception.LdapException: TimeOut occurred) 
... thousands of thousands ... 
Oct 12 22:23:53 - ERROR - LDAP error while reading entry cn=20031,ou=People,dc=lsc-project,dc=org (org.apache.directory.ldap.client.api.exception.InvalidConnectionException: Cannot connect on the server, the connection is invalid) 
Oct 12 22:23:53 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 22:23:53 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 22:23:53 - ERROR - LDAP error while reading entry cn=20032,ou=People,dc=lsc-project,dc=org (org.apache.directory.ldap.client.api.exception.InvalidConnectionException: Cannot connect on the server, the connection is invalid) 
Oct 12 22:23:53 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 22:23:53 - ERROR - LDAP error while reading entry cn=20033,ou=People,dc=lsc-project,dc=org (org.apache.directory.ldap.client.api.exception.InvalidConnectionException: Cannot connect on the server, the connection is invalid) 
Oct 12 22:23:53 - ERROR - Synchronization aborted because no source object has been found ! 
Oct 12 22:23:53 - ERROR - LDAP error while reading entry cn=10985,ou=People,dc=lsc-project,dc=org (org.apache.directory.ldap.client.api.exception.InvalidConnectionException: Cannot connect on the server, the connection is invalid) 
Oct 12 22:23:53 - ERROR - Synchronization aborted because no source object has been found ! 




[root at lsc lsc]# ps -ef | grep lsc 
root 9202 1 0 Oct11 ? 00:00:00 su -s /bin/bash lsc -c /usr/bin/lsc -a all -f /etc/lsc -t 1 
lsc 9205 9202 0 Oct11 ? 00:00:00 /bin/bash /usr/bin/lsc -a all -f /etc/lsc -t 1 
lsc 9219 9205 6 Oct11 ? 01:35:22 /opt/jdk/jre/bin/java -Dcom.sun.management.jmxremote=true -Dcom.sun.management.jmxremote.port=1099 -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -cp :.:/usr/lib/lsc/slf4j-api-1.6.0.jar:/usr/lib/lsc/ant-optional-1.5.1.jar:/usr/lib/lsc/antlr-2.7.7.jar:/usr/lib/lsc/api-all-1.0.0-M22.jar:/usr/lib/lsc/avalon-framework-4.1.3.jar:/usr/lib/lsc/bcprov-jdk16-140.jar:/usr/lib/lsc/btm-2.1.0.jar:/usr/lib/lsc/commons-beanutils-1.7.0.jar:/usr/lib/lsc/commons-beanutils-core-1.7.0.jar:/usr/lib/lsc/commons-cli-1.2.jar:/usr/lib/lsc/commons-codec-1.3.jar:/usr/lib/lsc/commons-collections-3.2.1.jar:/usr/lib/lsc/commons-configuration-1.4.jar:/usr/lib/lsc/commons-digester-1.8.jar:/usr/lib/lsc/commons-io-1.4.jar:/usr/lib/lsc/commons-jxpath-1.2.jar:/usr/lib/lsc/commons-lang-2.5.jar:/usr/lib/lsc/commons-logging-1.1.jar:/usr/lib/lsc/commons-logging-api-1.0.4.jar:/usr/lib/lsc/commons-pool-1.6.jar:/usr/lib/lsc/connector-api-1.5.jar:/usr/lib/lsc/dom4j-1.6.1.jar:/usr/lib/lsc/gdata-appsforyourdomain-1.0-1.47.1.jar:/usr/lib/lsc/gdata-client-1.0-1.47.1.jar:/usr/lib/lsc/gdata-contacts-3.0-1.47.1.jar:/usr/lib/lsc/gdata-core-1.0-1.47.1.jar:/usr/lib/lsc/gdata-media-1.0-1.47.1.jar:/usr/lib/lsc/groovy-all-1.7.0.jar:/usr/lib/lsc/guava-11.0.2.jar:/usr/lib/lsc/hamcrest-core-1.1.jar:/usr/lib/lsc/hsqldb-1.8.0.10.jar:/usr/lib/lsc/ibatis-sqlmap-2.3.4.726.jar:/usr/lib/lsc/javaee-api-5.jar:/usr/lib/lsc/javassist-3.16.1-GA.jar:/usr/lib/lsc/jcifs-1.2.19.jar:/usr/lib/lsc/jdom-b9.jar:/usr/lib/lsc/je-4.1.10.jar:/usr/lib/lsc/jline-0.9.94.jar:/usr/lib/lsc/jsr305-1.3.9.jar:/usr/lib/lsc/jta-1.1.jar:/usr/lib/lsc/logback-classic-0.9.21.jar:/usr/lib/lsc/logback-core-0.9.21.jar:/usr/lib/lsc/logkit-1.0.1.jar:/usr/lib/lsc/lsc-core-2.1.3.jar:/usr/lib/lsc/mina-core-2.0.7.jar:/usr/lib/lsc/reflections-0.9.9-RC1.jar:/usr/lib/lsc/rhino-1.7R4.jar:/usr/lib/lsc/servlet-api-2.2.jar:/usr/lib/lsc/slf4j-api-1.6.0.jar:/usr/lib/lsc/stax-utils-20060502.jar:/usr/lib/lsc/tapestry5-annotations-5.2.5.jar:/usr/lib/lsc/ws-commons-util-1.0.1.jar:/usr/lib/lsc/xadisk-1.1.jar:/usr/lib/lsc/xerces-1.2.3.jar:/usr/lib/lsc/xml-apis-1.4.01.jar:/usr/lib/lsc/xmlrpc-client-3.0.jar:/usr/lib/lsc/xmlrpc-common-3.0.jar:/usr/lib/lsc/xpp3-1.1.4c.jar:/usr/lib/lsc/xpp3_min-1.1.4c.jar:/usr/lib/lsc/xstream-1.3.1.jar org.lsc.Launcher -a all -f /etc/lsc -t 1 
root 27991 27791 2 22:25 pts/1 00:00:02 vi /var/log/lsc/lsc.log 
root 28013 27776 0 22:26 pts/0 00:00:00 grep lsc 




[root at lsc lsc]# chkconfig --list | grep 3:on 
blk-availability 0:off 1:on 2:on 3:on 4:on 5:on 6:off 
cpuspeed 0:off 1:on 2:on 3:on 4:on 5:on 6:off 
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
irqbalance 0:off 1:off 2:off 3:on 4:on 5:on 6:off 
iscsi 0:off 1:off 2:off 3:on 4:on 5:on 6:off 
iscsid 0:off 1:off 2:off 3:on 4:on 5:on 6:off 
lsc 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
lvm2-monitor 0:off 1:on 2:on 3:on 4:on 5:on 6:off 
mdmonitor 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
messagebus 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
rsyslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
sendmail 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off 
sysstat 0:off 1:on 2:on 3:on 4:on 5:on 6:off 
udev-post 0:off 1:on 2:on 3:on 4:on 5:on 6:off 
uuidd 0:off 1:off 2:on 3:on 4:on 5:on 6:off 




[root at lsc lsc]# /usr/bin/lsc -a all -f /etc/lsc -t 1 
LSC: to control your asynchronous task(s), consider setting the LSC_JMXPORT 
environment variable to a positive value to bind the JMX interface to that 
TCP port. 
Oct 12 22:29:48 - INFO - Logging configuration successfully loaded from /etc/lsc/logback.xml 
Oct 12 22:29:48 - INFO - LSC configuration successfully loaded from /etc/lsc/ 
Oct 12 22:29:48 - INFO - Connecting to LDAP server ldap:// adlds.lsc-project.org:389/dc=lsc-project,dc=org as cn=LSC,dc=lsc-project,dc=org 
Oct 12 22:29:48 - INFO - Connecting to LDAP server ldaps:// 192.168.1.10:636/dc=lsc-project,dc=org as cn=Directory Manager,dc=lsc-project,dc=org 
Oct 12 22:29:49 - INFO - Starting async for Sync_Groups 
Oct 12 22:29:49 - INFO - Starting async for Sync_Users 
Oct 12 22:30:04 - ERROR - There is no future associated with operation message ID 28, perhaps the operation would have been completed 


Can you help me??? 


Thanks in advance 
Regards 




Massimo 


Da: "Sébastien Bahloul" < sebastien.bahloul at gmail.com > 
A: "Massimo Ciancio" < massimo.ciancio at itech.it > 
Cc: "lsc-users" < lsc-users at lists.lsc-project.org > 
Inviato: Martedì, 11 ottobre 2016 15:54:08 

Oggetto: Re: [lsc-users] issue with aSync groups with LSC 2.1 service 

Hi Massimo, 

I have to say that it is also an error that I have encountered and currently failed to fix. Can you check the status of the connections (netstat -an |grep 389)? 

Regards, 

Sebastien BAHLOUL 

2016-10-11 9:58 GMT+02:00 Massimo Ciancio < massimo.ciancio at itech.it > : 

<blockquote>



LSC run as a service, but after only a few hours of perfect operation enters a loop with this error, see attachment 

If you stop the service, and manually run the task lsc not encounter any problems. 

OpenLDAP server is running normally and reading the logs I see the connections of LSC with result OK. 

Also enclose lsc.xml 

Using LSC 2.1 with java 1.7 in CentOS 6.8, SELINUX disabled, iptable off, ntp ok... 




Some idea? 




Thanks in advance 
Regards 




Massimo 



Da: "Clément OUDOT" < clement.oudot at savoirfairelinux.com > 
A: lsc-users at lists.lsc-project.org 
Inviato: Venerdì, 23 settembre 2016 11:48:26 
Oggetto: Re: [lsc-users] issue with aSync groups with LSC 2.1 service 






Le 23/09/2016 à 11:35, Massimo Ciancio a écrit : 

<blockquote>

Hi to all 

I have a strange situation 

Using LSC 2.1 with java 1.7, after a manual run of LSC with 



/usr/bin/lsc -f /etc/lsc -s all -c all 

i have always correct result 

Sep 23 10:20:10 - INFO - Starting sync for Sync_Groups 


Sep 23 10:20:16 - INFO - All entries: 186, to modify entries: 0, successfully modified entries: 0, errors: 0 

Sep 23 10:20:16 - INFO - Starting clean for Sync_Groups 


Sep 23 10:20:18 - INFO - All entries: 186, to modify entries: 0, successfully modified entries: 0, errors: 0 

Sep 23 10:20:18 - INFO - Starting sync for Sync_Users 

Sep 23 10:20:20 - INFO - All entries: 1013, to modify entries: 0, successfully modified entries: 0, errors: 0 
Sep 23 10:20:20 - INFO - Starting clean for Sync_Users 
Sep 23 10:20:22 - INFO - All entries: 1013, to modify entries: 0, successfully modified entries: 0, errors: 0 




All ok!... but when run a LSC service for async and check Sync Group the result with lsc-agent return this result: 




first check 




# lsc-agent -s Sync_Groups 




Sep 23 11:17:08 - INFO - Hostname parameter not specified, using localhost as default value. 
Sep 23 11:17:08 - INFO - TCP Port parameter not specified, using 1099 as default value. 
Sep 23 11:17:08 - INFO - Connecting to remote engine on : service:jmx:rmi:///jndi/rmi://localhost:1099/jmxrmi 
Sep 23 11:17:08 - INFO - Asynchronous task Sync_Groups is running 
Sep 23 11:17:08 - INFO - All entries: 55800, to modify entries: 0, successfully modified entries: 0, errors: 0 




second check 




Sep 23 11:17:34 - INFO - Hostname parameter not specified, using localhost as default value. 
Sep 23 11:17:34 - INFO - TCP Port parameter not specified, using 1099 as default value. 
Sep 23 11:17:34 - INFO - Connecting to remote engine on : service:jmx:rmi:///jndi/rmi://localhost:1099/jmxrmi 
Sep 23 11:17:34 - INFO - Asynchronous task Sync_Groups is running 
Sep 23 11:17:34 - INFO - All entries: 56181, to modify entries: 0, successfully modified entries: 0, errors: 0 







Why?? All entries always increase????? 




Any idea?? 



It's not a bug, it's a feature ;) 

In async mode, the total entries represent all initial entries and all entries modifed after first sync. 
-- 
Clément OUDOT
Consultant en logiciels libres, Expert infrastructure et sécurité
Savoir-faire Linux
87, rue de Turbigo - 75003 PARIS
Blog: http://sflx.ca/coudot 

_______________________________________________________________ 
Ldap Synchronization Connector (LSC) - http://lsc-project.org 

lsc-users mailing list 
lsc-users at lists.lsc-project.org 
http://lists.lsc-project.org/listinfo/lsc-users 


_______________________________________________________________ 
Ldap Synchronization Connector (LSC) - http://lsc-project.org 

lsc-users mailing list 
lsc-users at lists.lsc-project.org 
http://lists.lsc-project.org/listinfo/lsc-users 

</blockquote>




</blockquote>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lsc-project.org/pipermail/lsc-users/attachments/20161121/c659402a/attachment-0001.htm>


More information about the lsc-users mailing list