Bug 9430 - importing users/groups from LDAP incorrect
Summary: importing users/groups from LDAP incorrect
Status: NEW
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: Tools (show other bugs)
Version: unspecified
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
Depends on:
Reported: 2012-11-26 01:51 UTC by Brian May
Modified: 2013-02-11 16:58 UTC (History)
2 users (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Brian May 2012-11-26 01:51:40 UTC
When importing users, the uid attribute is not copied. I think this is an important attribute if Unix logins are required. cn= can't really be used as a substitute (as cn has set value AFAIK).

When importing groups, it loses the Unix name (cn) of the group, and uses either the displayName or description instead, e.g.

Source group:

# ca_sys_integration, group, vpac.org
dn: cn=ca_sys_integration,ou=group,dc=vpac,dc=org
sambaGroupType: 2
displayName: Systems Integration
cn: ca_sys_integration
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: S-1-5-21-1268321594-3481289969-4150125466-21087
gidNumber: 10043
description: Systems Integration


# Systems Integration, Users, ad.vpac.org
dn: CN=Systems Integration,CN=Users,DC=ad,DC=vpac,DC=org
cn: Systems Integration
description: Systems Integration
instanceType: 4
whenCreated: 20121115070939.0Z
whenChanged: 20121115070939.0Z
uSNCreated: 3913
name: Systems Integration
objectGUID:: tGru9koTAU+Oe3sHYvmOgA==
sAMAccountName: Systems Integration
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=ad,DC=vpac,DC=org
gidNumber: 10043
objectClass: top
objectClass: posixGroup
objectClass: group
msSFU30NisDomain: vpac
uSNChanged: 3916
distinguishedName: CN=Systems Integration,CN=Users,DC=ad,DC=vpac,DC=org

it has lost the cn=ca_sys_integration