Samba4 primaryGroupID problem

[Andrew Bartlett]

On Mon, 2013-03-25 at 10:08 +0200, Alexis wrote:
> Andrew Bartlett wrote:
> 
> > On Fri, 2013-03-22 at 11:46 +0200, Alexis wrote:
> >> Hi,
> >> I was reading this "old" post about db corruption when changing
> >> primaryGroupID via ldbedit:
> >> 
> >> >> ERROR: orphaned backlink attribute 'memberOf' in CN=bar,OU=Domain
> >> >> Users,DC=X for link member in CN=bargroup,OU=Domain Groups,DC=X
> >> >> Not removing orphaned backlink member
> >> >> ERROR: incorrect DN string component for member in object
> >> >> CN=bargroup,OU=Domain Groups,DC=X -
> >> >> <GUID=762c38c2-f7c7-4915-87f0-bf189abb553e>;CN=bar,OU=Domain
> >> >> Users,DC=X Not fixing incorrect string version of DN
> >> 
> >> As I have the exacte same problem with 4.0.4 version I was wondering what
> >> could be done to have this solved.
> > 
> > Does samba-tool dbcheck fix it?  (Use --fix to make it offer to fix the
> > database).
> > 
> > Andrew Bartlett
> > 
> 
> I reallized the corrution is occuring too when primaryGroup is edited from 
> Windows "active Directory users and computers" tools.
> 
> And yes samba-tool dbcheck --fix does fix the db but does it means I must 
> run it after evrery account creation? Sound weird to me :-)

Please file a bug, preferably with a network trace so we can
double-check exactly the operations involved and write tests to match.

https://wiki.samba.org/index.php/Capture_Packets

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org