By default, Samba as a Domain Controller with a LDAP backend reads the
name of a group from the displayName attribute and if this
attribute is not set from attribute cn. For some setups this
behavior is undesirable or not feasible (i.e. one would like
to ignore the displayname-content and always use the cn-attribute).
To make Samba always us the cn attribute, I suggest to add the option "ldapsam:ignoreGroupDisplayName" (values: yes/no) to Samba.
Set to "yes" this option should forces the displayName attribute of groups
to be ignored.
A patch implementing this option follows.
Created attachment 5427 [details]
My patch implements the option "ldapsam:ignoreGroupDisplayName" (samba-3.4.6).
Raising product as enhancements won't be added to 3.4, but for upcoming 3.6.
the goal looks reasonable but it looks like the logic of the patch about when to pull the cn and when to pull the displayname attribute needs some rework.