Bug 15670 - add_remove_group_members not work with group > 1500 members (MSAD)
Summary: add_remove_group_members not work with group > 1500 members (MSAD)
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Python (show other bugs)
Version: 4.20.2
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Douglas Bagnall
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-06-25 16:15 UTC by Simon Fonteneau
Modified: 2024-06-26 02:56 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Simon Fonteneau 2024-06-25 16:15:06 UTC 
On Microsoft active directory, when a group has more than 1500 members, the member attribute is returned with "member;range=0-1499"

add_remove_group_members check targetmember_dn in member attribut :

https://github.com/samba-team/samba/blob/415f9f07456e3fd24063e7508d8b2553df020c21/python/samba/samdb.py#L445

this will not work with member;range=0-1499 attribut


The problem is that this doesn't throw an error, it just won't work.
Comment 1 Douglas Bagnall 2024-06-26 02:56:43 UTC 
Interestingly enough, we fixed this for a previous iteration of our tools in https://bugzilla.samba.org/show_bug.cgi?id=707