Bug 16022 - dbcheck should check for sAMAccountType and PrimaryGroupID on user accounts
Summary: dbcheck should check for sAMAccountType and PrimaryGroupID on user accounts
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.24.0rc*
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-03-10 16:20 UTC by Denis Cardon
Modified: 2026-03-11 13:02 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Denis Cardon 2026-03-10 16:20:53 UTC 
When dealing with older domains, one may encounter cases where some accounts are missing sAMAccountType attribute or primaryGroupID attribute. It is hard to spot because it should not happen.

In the old time Samba was much less strict on consistency, I guess this shouldn't happen anymore, but it can be seen on older Samba domains.

It would be great if dbcheck could check for those corner cases.