root@sys11:/etc/ssl/local# /usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=/tmp/samba --use-xattrs=yes --realm=ad.vpac.org /tmp/smb.conf
WARNING: The "idmap backend" option is deprecated
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Unknown parameter encountered: "share modes"
Ignoring unknown parameter "share modes"
Importing WINS database
Importing Account policy
Importing idmap database
Group already exists sid=S-1-5-21-1268321594-3481289969-4150125466-513, groupname=Domain Users existing_groupname=Domain Users, Ignoring.
Group already exists sid=S-1-5-21-1268321594-3481289969-4150125466-514, groupname=Domain Guests existing_groupname=Domain Guests, Ignoring.
Group already exists sid=S-1-5-21-1268321594-3481289969-4150125466-512, groupname=Domain Admins existing_groupname=Domain Admins, Ignoring.
Failed to modify account record CN=bill,CN=Users,DC=ad,DC=vpac,DC=org to set user attributes: objectclass_attrs: attribute 'description' on entry 'CN=bill,CN=Users,DC=ad,DC=vpac,DC=org' contains at least one invalid value!
ERROR(<class 'passdb.error'>): uncaught exception - Unable to add sam account 'bill', (-1073741811,Unexpected information received)
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run
return self.run(*args, **kwargs)
File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line 1318, in run
useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
File "/usr/local/samba/lib/python2.7/site-packages/samba/upgrade.py", line 890, in upgrade_from_samba3
Would be nice if it could tell me what is wrong with the description field on this user. Is there some sort of restriction on length? Other then that, description is just plain standard ASCII.
I have conducted searches, but not able to find anything on restrictions on the AD Description field that might explain these errors.
I'm going to NEEDINFO this, because we need info, like what the description actually was, and hopefully what git commit was used.
I assume this information is long forgotten, and probably the underlying bug (if there was one) is gone, overlaid by sophisticated new bugs.
Even if the description was invalid in some way, there is the germ of a valid complaint here:
> Would be nice if it could tell me what is wrong with the description field on this user.
Yes, that information is long gone.
I am going to take a stab in the dark and suggest it may have been some UTF8 character (most likely one one the quote characters) which the field does not allow.
But in actual fact I have no idea.