[Samba] Is it possible to lower the domain and forest functional level
Harry Jede
walk2sun at arcor.de
Mon Feb 19 19:08:46 UTC 2018
Am Montag, 19. Februar 2018, 19:07:12 CET schrieb Christophe Borivant
via samba:
> I made a try translating the group names one by one in the
> setup/provision_users.ldif file. The first groups went OK but when I
> translate "Incoming Forest Trust Builders" by "Générateurs
> d'approbations de forêt entrante", I get this error from the script :
> Traceback (most recent call last):
> File "source4/scripting/bin/samba_upgradeprovision", line 1714, in
> <module> schema, schemareloadclosure):
> File "source4/scripting/bin/samba_upgradeprovision", line 1360, in
> update_samdb schema, provisionUSNs, prereloadfunc)
> File "source4/scripting/bin/samba_upgradeprovision", line 1145, in
> update_partition add_missing_entries(ref_samdb, samdb, names,
basedn,
> listMissing) File "source4/scripting/bin/samba_upgradeprovision",
> line 757, in add_missing_entries hashMissing, index)
> File "source4/scripting/bin/samba_upgradeprovision", line 616, in
> add_missing_object controls=["search_options:1:2"])
> _ldb.LdbError: (1, 'Unable to parse search expression')
>
> Could the "ê" be a problem or the length of the string ?
Yes and no.
Ldap in general can not store extented characters. One may use base64
encoding, i.e.
$ echo "Générateurs d'approbations de forêt entrante" |base64
R8OpbsOpcmF0ZXVycyBkJ2FwcHJvYmF0aW9ucyBkZSBmb3LDqnQgZW50cmF
udGUK
Your delimeter in ldif files is then a double colon.
Name: Incoming Forest Trust Builders
become
Name::
R8OpbsOpcmF0ZXVycyBkJ2FwcHJvYmF0aW9ucyBkZSBmb3LDqnQgZW50cmF
udGUK
$ echo
R8OpbsOpcmF0ZXVycyBkJ2FwcHJvYmF0aW9ucyBkZSBmb3LDqnQgZW50cmF
udGUK |base64 -d
Générateurs d'approbations de forêt entrante
I do not know if this works with AD and/or Samba and the used tools and
libs. Their are some other ways to deal with non-ascii characters.
--
Harry Jede
More information about the samba
mailing list