[Samba] samba4 - error during classicupgrade

[Stéphane PURNELLE]

My main Administrator account is "Administrateur" because my workstations 
language is french.

"Administrator" account is for server (Windows 2003 and Windows 2008)

I have two administrator accounts for according to profile and language.

If you log a french profile on a english workstation, profile will be 
modify for add english menu (Accessoires <-> accessories)... and this is 
not good.

I already tried to modify python script for ignore "-500" test.... but 
when script read my "administrator" account, script hang because 
administrator alread exist (created by full provision I suppose)


regards

        Stéphane Purnelle

-----------------------------------
Stéphane PURNELLE                         Admin. Systèmes et Réseaux 
Service Informatique       Corman S.A.           Tel : 00 32 (0)87/342467

Andrew Bartlett <abartlet at samba.org> wrote on 14/07/2013 14:16:28:

> De : Andrew Bartlett <abartlet at samba.org>
> A : Stéphane PURNELLE <stephane.purnelle at corman.be>, 
> Cc : samba at lists.samba.org
> Date : 14/07/2013 14:36
> Objet : Re: [Samba] samba4 - error during classicupgrade
> 
> On Tue, 2013-07-09 at 14:49 +0200, Stéphane PURNELLE wrote:
> > Hi all, 
> > 
> > I found the problem, unsupported character in displayName prjLeudi+,
> > samba don't like the charecter + in displayName. 
> 
> The bug here is that we should have escaped this value before we put it
> into the DN. 
> 
> > Next problem: SID on user Administrator. 
> > 
> > samba-tool classicupgrade don't terminate correcly because I saw that 
> > Administrator user don't have the correct SID (ending -500).
> > 
> > We have 2 administrator user (in french and in english) : 
> > 
> > Administrateur 
> > Administrator 
> > 
> > SID S-1-5-21-4023731279-819928261-1073345436-500 is on user 
> > Administrateur.
> > 
> > How can I force samba to by pass this test ? 
> 
> What is happening here is that we simply ignore the -500 user from your
> import, and then re-add the administrator.  The issue is that we add it
> in english, so if you have a second administrator (a bad idea in my
> view) it will collide.  Just remove that from the import source before
> you start.
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                                
http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
> 
> 
> 
> 
> 
> 
>