I create a personal Samba Domain Controller and added some users for my family usage.
I created my personal account with wrongly named attribute
When i try to remove wrong user attribute using following command:
samba-tool dbcheck --cross-ncs --fix --yes
i receive the error below:
ERROR: unknown attribute 'userCertificate;binary' in CN=andrea,CN=Users,DC=frati,DC=local
Remove unknown attribute userCertificate;binary [YES]
ERROR: Failed to remove unknown attribute userCertificate;binary : (65, 'replmd_modify_handle_linked_attribs: attribute userCertificate;binary is not a valid attribute in schema')
I'm not able to do that using any other tool like ldapmodify or ldbmodify too.
The bug is still present, could you solve it ?
This needs more work than a simple dbcheck patch (and there is no such thing as a simple dbcheck patch, sadly), as we really should handle the ;binary case properly and just correct the name in dbcheck.
Sadly while we are quite happy to record bugs in bugzilla, it isn't the source of our work program, that comes down to developer interest or the needs of Samba commercial support customers.
I realise this makes things difficult for home use, but such is the reality of modern software development.
If you have the time and skill, you could try to fix this yourself, we would gladly work with you on that.
I don't expect you to solve my problem. But you could at least try to understand how it was possible to add a malformed attribute that cannot be removed later. The same thing could happen to a business customer which could cause a lot of problems.