LDAP sync deactivated users
search cancel

LDAP sync deactivated users

book

Article ID: 220244

calendar_today

Updated On:

Products

CA Automic One Automation

Issue/Introduction

During LDAP SYNC some users got deactivated due to null pointer exception - broken pipe error.

Due to the exception users are deactivate, while they should remain active.


The exception is displayed below (bold):

***************************************************************************
**  ucxjlx6m     version 12.3.4+hf.1.build.1603783711171 changelist 1603459320  **
**  JOB 0106762314 (ProcID:0000017813) START AT   28.04.2021 / 15:00:30  **
**                                     UTC TIME   28.04.2021 / 13:00:30  **
**  TEXT="        Job started             "                              **
***************************************************************************
Synch XML    = LDAPSync_base.xml
Synch Client = 3000 
2021-04-28 15:00:31.051 [main] c.a.s.l.LDAPSynchronizer                 INFO   =================
2021-04-28 15:00:31.053 [main] c.a.s.l.LDAPSynchronizer                 INFO   LDAP SYNC starts
2021-04-28 15:00:31.053 [main] c.a.s.l.LDAPSynchronizer                 INFO   Version: 
2021-04-28 15:00:31.054 [main] c.a.s.l.LDAPSynchronizer                 INFO   Build number: 
2021-04-28 15:00:31.055 [main] c.a.s.l.LDAPSynchronizer                 INFO   =================
2021-04-28 15:00:31.057 [main] c.a.s.l.SynchronizationStepChain         INFO   -------------------------------------------------------------
2021-04-28 15:00:31.057 [main] c.a.s.l.SynchronizationStepChain         INFO   PERFORM CLIArgumentsParsingStep
2021-04-28 15:00:31.065 [main] c.a.s.l.s.CLIArgumentsParsingStep        INFO   Config File: /dat/uc4_data/uc4/LDAP_SYNC/puc4/LDAPSync_base.xml | Client: 3000
2021-04-28 15:00:31.067 [main] c.a.s.l.SynchronizationStepChain         INFO   FINISH CLIArgumentsParsingStep, time = 9 milliseconds
2021-04-28 15:00:31.067 [main] c.a.s.l.SynchronizationStepChain         INFO   -------------------------------------------------------------
2021-04-28 15:00:31.067 [main] c.a.s.l.SynchronizationStepChain         INFO   PERFORM ConfigurationParsingStep
Security framework of XStream not initialized, XStream is probably vulnerable.
2021-04-28 15:00:31.430 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   AE Info:
2021-04-28 15:00:31.430 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  CP: AE_Server:2201
2021-04-28 15:00:31.430 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  Username: 0/UC/UC
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   LDAP Info:
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  URL: domain01:636
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  Server: DOMAIN01
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  Directory Type: AD
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  Username: domain01\user_name
2021-04-28 15:00:31.431 [main] c.a.s.l.s.ConfigurationParsingStep       INFO   |  Use SSL: true
Security framework of XStream not initialized, XStream is probably vulnerable.
Security framework of XStream not initialized, XStream is probably vulnerable.
2021-04-28 15:00:31.510 [main] c.a.s.l.SynchronizationStepChain         INFO   FINISH ConfigurationParsingStep, time = 443 milliseconds
2021-04-28 15:00:31.511 [main] c.a.s.l.SynchronizationStepChain         INFO   -------------------------------------------------------------
2021-04-28 15:00:31.511 [main] c.a.s.l.SynchronizationStepChain         INFO   PERFORM InitializeStep
2021-04-28 15:00:31.511 [main] c.a.s.l.s.InitializeStep                 INFO   Connect to AE server...
2021-04-28 15:00:32.053 [main] c.a.s.l.s.InitializeStep                 INFO   Connect to AE server successfully
2021-04-28 15:00:32.054 [main] c.a.s.l.s.InitializeStep                 INFO   Connect to LDAP server...
2021-04-28 15:00:32.080 [main] o.a.d.a.l.c.o.DefaultLdapCodecService    INFO   Registered pre-bundled control factory: 1.3.6.1.4.1.18060.0.0.1
...
2021-04-28 15:00:32.094 [main] o.a.d.a.l.c.s.CodecFactoryUtil           INFO   Registered pre-bundled extended operation factory: 1.3.6.1.4.1.1466.20037
2021-04-28 15:00:32.397 [main] c.a.s.l.s.InitializeStep                 INFO   Connect to LDAP server successfully
2021-04-28 15:00:32.398 [main] c.a.s.l.SynchronizationStepChain         INFO   FINISH InitializeStep, time = 887 milliseconds
2021-04-28 15:00:32.400 [main] c.a.s.l.SynchronizationStepChain         INFO   -------------------------------------------------------------
2021-04-28 15:00:32.400 [main] c.a.s.l.SynchronizationStepChain         INFO   PERFORM AESynchronizationStep
2021-04-28 15:00:32.400 [main] c.a.s.l.s.AESynchronizationStep          INFO   Start synchronizing users to AE client 3000
2021-04-28 15:00:32.417 [main] c.a.s.l.s.AESynchronizationStep          INFO   Check connection to LDAP Server successfully.
2021-04-28 15:00:32.417 [main] c.a.s.l.s.BaseSynchronizationStep        INFO   Load group mapping from the client config file:
2021-04-28 15:00:32.423 [main] c.a.s.l.s.BaseSynchronizationStep        INFO   | g-UC4-3000-prod -> UC4.STANDARD.GROUP
2021-04-28 15:00:32.424 [main] c.a.s.l.s.AESynchronizationStep          INFO   ===== Start sync g-UC4-3000-prod -> UC4.STANDARD.GROUP
2021-04-28 15:00:32.428 [main] c.a.s.l.s.AESynchronizationStep          INFO   Find differences between LDAP server and AE server...
2021-04-28 15:00:32.429 [main] c.a.s.l.s.AESynchronizationStep          INFO   Fetching users from LDAP...
java.io.IOException: Broken pipe
 at sun.nio.ch.FileDispatcherImpl.write0(Native Method)
 at sun.nio.ch.SocketDispatcher.write(SocketDispatcher.java:47)
 at sun.nio.ch.IOUtil.writeFromNativeBuffer(IOUtil.java:93)
 at sun.nio.ch.IOUtil.write(IOUtil.java:65)
 at sun.nio.ch.SocketChannelImpl.write(SocketChannelImpl.java:471)
 at org.apache.mina.transport.socket.nio.NioProcessor.write(NioProcessor.java:384)
 at org.apache.mina.transport.socket.nio.NioProcessor.write(NioProcessor.java:47)
 at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.writeBuffer(AbstractPollingIoProcessor.java:1107)
 at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.flushNow(AbstractPollingIoProcessor.java:994)
 at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.flush(AbstractPollingIoProcessor.java:921)
 at org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:688)
 at org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
 at java.lang.Thread.run(Thread.java:748)
2021-04-28 15:16:22.832 [main] c.a.s.l.s.AESynchronizationStep          INFO   ...found 14 users from LDAP groups g-UC4-3000-prod
2021-04-28 15:16:22.833 [main] c.a.s.l.s.AESynchronizationStep          INFO   Fetching users from AE...
2021-04-28 15:16:23.438 [main] c.a.s.l.s.AESynchronizationStep          INFO   ...found 65 user from client 3000, 38 user in group UC4.STANDARD.GROUP
2021-04-28 15:16:23.459 [main] c.a.s.l.s.AESynchronizationStep          INFO   Found 26 difference(s) between LDAP server and AE server
2021-04-28 15:16:23.459 [main] c.a.s.l.s.AESynchronizationStep          INFO   Apply changes on AE server...
2021-04-28 15:16:23.460 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER1/DEPT' (Group), remove from UC4.STANDARD.GROUP [1/26]
2021-04-28 15:16:23.766 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER2/DEPT' (Group), remove from UC4.STANDARD.GROUP [2/26]
2021-04-28 15:16:24.084 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER3/DEPT' (Group), remove from UC4.STANDARD.GROUP [3/26]
2021-04-28 15:16:24.352 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER4/DEPT' (Group), remove from UC4.STANDARD.GROUP [4/26]
2021-04-28 15:16:24.626 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER5/DEPT' (Group), remove from UC4.STANDARD.GROUP [5/26]
2021-04-28 15:16:24.957 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER6/DEPT' (Group), remove from UC4.STANDARD.GROUP [6/26]
2021-04-28 15:16:25.230 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER7/DEPT' (Group), remove from UC4.STANDARD.GROUP [7/26]
2021-04-28 15:16:25.501 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER8/DEPT' (Group), remove from UC4.STANDARD.GROUP [8/26]
2021-04-28 15:16:25.787 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER9/DEPT' (Group), remove from UC4.STANDARD.GROUP [9/26]
2021-04-28 15:16:26.089 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER10/DEPT' (Group), remove from UC4.STANDARD.GROUP [10/26]
2021-04-28 15:16:26.372 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER11/DEPT' (Group), remove from UC4.STANDARD.GROUP [11/26]
2021-04-28 15:16:26.752 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER12/DEPT' (Group), remove from UC4.STANDARD.GROUP [12/26]
2021-04-28 15:16:27.024 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER13/DEPT' (Group), remove from UC4.STANDARD.GROUP [13/26]
2021-04-28 15:16:27.294 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER1/DEPT' (Deactivate) [14/26]
2021-04-28 15:16:27.504 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER2/DEPT' (Deactivate) [15/26]
2021-04-28 15:16:27.652 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER3/DEPT' (Deactivate) [16/26]
2021-04-28 15:16:27.814 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER4/DEPT' (Deactivate) [17/26]
2021-04-28 15:16:27.961 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER5/DEPT' (Deactivate) [18/26]
2021-04-28 15:16:28.118 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER6/DEPT' (Deactivate) [19/26]
2021-04-28 15:16:28.274 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER7/DEPT' (Deactivate) [20/26]
2021-04-28 15:16:28.426 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER8/DEPT' (Deactivate) [21/26]
2021-04-28 15:16:28.622 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER9/DEPT' (Deactivate) [22/26]
2021-04-28 15:16:28.782 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER10/DEPT' (Deactivate) [23/26]
2021-04-28 15:16:28.934 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER11/DEPT' (Deactivate) [24/26]
2021-04-28 15:16:29.095 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER12/DEPT' (Deactivate) [25/26]
2021-04-28 15:16:29.264 [main] c.a.s.l.s.AESynchronizationStep          INFO   Sync user 'USER13/DEPT' (Deactivate) [26/26]
2021-04-28 15:16:29.428 [main] c.a.s.l.SynchronizationStepChain         INFO   FINISH AESynchronizationStep, time = 957028 milliseconds
2021-04-28 15:16:29.432 [down] c.a.s.l.s.FinalizeStep                   INFO   ==================
2021-04-28 15:16:29.432 [down] c.a.s.l.s.FinalizeStep                   INFO   LDAP SYNC finished (SUCCESS)
2021-04-28 15:16:29.432 [down] c.a.s.l.s.FinalizeStep                   INFO   TOTAL TIME: 958403 milliseconds
***************************************************************************
**  ucxjlx6m     version 12.3.4+hf.1.build.1603783711171 changelist 1603459320  **
**  JOB 0106762314 (ProcID:0000017813) ENDED AT   28.04.2021 / 15:16:29  **
**                                     UTC TIME   28.04.2021 / 13:16:29  **
**  TEXT="        Job ended               "       RETCODE=00             **
***************************************************************************

Environment

Release : 2.3.2

Component : LDAP Sync

Cause

Despite the exception the program continues to process leading to a difference and deactivation of users. This is a bug

Resolution

Workaround: set autoDeactivateUsers="false"

 

Solution:

Update to a fix version listed below or a newer version if available.


Fix version:

Component(s): LDAP Sync

LDAP Sync 2.3.3 - Available