[Samba] Problem with account with bad character

Tue Sep 15 11:30:36 UTC 2015

Hi Stéphane,

As far as I understand you have one user using the following DN:
CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be
which you can not delete nor modify because its displayName attribute is
not well encoded.

Rowland gave you the way to proceed, using ldbmodify to modify your user.
And this process avoid deletion of your user, which also avoid re-creation
of this user.

I'll rewrite what Rowland said:
+ Create a text file on the DC which contains the wrong user object with
the following content :
----------------------------
dn: CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be
changetype: modify
replace: displayName
displayName: Valérie Dubois
----------------------------

This file is a LDIF file which would "replace" displayName with the
displayName you gave, this action will be performed for on DN, the one you
gave.

Then use that file with ldbmodify:
Let's say you called the file "vdu.ldif", the command will be :
ldbmodify -H $sam /path/to/vdu.ldif

2015-09-15 13:06 GMT+02:00 Stéphane PURNELLE <stephane.purnelle at corman.be>:

>
> Hi,
>
> Yes, it's true, I discovered the problem after my migration from samba 3 to
> samba 4 (in 2014).
> Now, because these users block the replication to my windows DC, I must
> find a solution.
>
> the workaround that maybe I can use is to move the user to the lostandfound
> tree.
> But I would like to know if I can do that.
>
> I put the samba-techninal list for having a idea from samba dev
>
> regards
>
>         Stéphane Purnelle
>
>
> "samba" <samba-bounces at lists.samba.org> a écrit sur 15/09/2015 12:50:22 :
>
> > De : L.P.H. van Belle <belle at bazuin.nl>
> > A : samba at lists.samba.org <samba at lists.samba.org>,
> > Date : 15/09/2015 12:54
> > Objet : Re: [Samba] Problem with account with bad character
> > Envoyé par : "samba" <samba-bounces at lists.samba.org>
> >
> > Have a look at this one :
> > https://lists.samba.org/archive/samba/2014-September/184752.html
> >
> > and your message of 24/02/2014,, you did it again ;-)
> >
> > http://samba.2283325.n4.nabble.com/URGENT-big-problem-with-
> > displayName-td4661435.html
> >
> > i think you need to ask to samba dev's
> >
> > Greetz,
> >
> > Louis
> >
> >
> > > -----Oorspronkelijk bericht-----
> > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Stéphane
> PURNELLE
> > > Verzonden: dinsdag 15 september 2015 12:35
> > > Aan: samba at lists.samba.org
> > > Onderwerp: Re: [Samba] Problem with account with bad character
> > >
> > >
> > > Hi,
> > >
> > > Same problem with apache studio directory
> > >
> > > !ERROR [LDAP: error code 80 - failed to create index key for attribute
> > > 'displayName':Unknow error.
> > >
> > > regards
> > >
> > >    Stéphane Purnelle
> > >
> > > "samba" <samba-bounces at lists.samba.org> a écrit sur 15/09/2015
> 09:57:18 :
> > >
> > > > De : L.P.H. van Belle <belle at bazuin.nl>
> > > > A : samba at lists.samba.org <samba at lists.samba.org>,
> > > > Date : 15/09/2015 10:01
> > > > Objet : Re: [Samba] Problem with account with bad character
> > > > Envoyé par : "samba" <samba-bounces at lists.samba.org>
> > > >
> > > > You can try it with the apache studio directory
> > > > https://directory.apache.org/studio/
> > > > its free, and very Handy.
> > > >
> > > > Greetz,
> > > >
> > > > Louis
> > > >
> > > >
> > > > > -----Oorspronkelijk bericht-----
> > > > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Stéphane
> > > PURNELLE
> > > > > Verzonden: dinsdag 15 september 2015 9:19
> > > > > Aan: Marc Muehlfeld
> > > > > CC: samba at lists.samba.org
> > > > > Onderwerp: Re: [Samba] Problem with account with bad character
> > > > >
> > > > >
> > > > > Hi,
> > > > >
> > > > > This command not work because displayName is bad encoded.
> > > > >
> > > > >  /usr/local/samba/bin/ldbdel -H /srv/samba/private/sam.ldb
> > > > > 'CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be'
> > > > > ldb_handler_fold: unable to casefold string [Valrie Dubois]
> > > > > delete of 'CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be' failed
> -
> > > > > (Operations error) replmd_delete: Failed to modify object
> > > > > CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be in delete -
> attribute
> > > > > 'displayName': no such attribute for delete on
> > > > > 'CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be'
> > > > >
> > > > >
> > > > > regards
> > > > >
> > > > >    Stéphane
> > > > >
> > > > > Marc Muehlfeld <mmuehlfeld at samba.org> a écrit sur 15/09/2015
> 07:53:48
> > > :
> > > > >
> > > > > > De : Marc Muehlfeld <mmuehlfeld at samba.org>
> > > > > > A : Stéphane PURNELLE <stephane.purnelle at corman.be>,
> > > > > > Cc : samba at lists.samba.org
> > > > > > Date : 15/09/2015 07:53
> > > > > > Objet : Re: [Samba] Problem with account with bad character
> > > > > >
> > > > > > Am 14.09.2015 um 22:58 schrieb Stéphane PURNELLE:
> > > > > > > /usr/local/samba/bin/ldbedit -H /srv/samba/private/sam.ldb
> > > 'cn=vdu'
> > > > > > > ldb_handler_fold: unable to casefold string [Valérie Dubois]
> > > > > > > failed to modify
> CN=vdu,CN=Users,DC=cormandom,DC=int-corman,DC=be
> > > -
> > > > > Failed
> > > > > > > to create index key for attribute 'displayName':Unknown error
> > > > > > >
> > > > > > > I looked about ldbdel, but I don't find an example.and I
> already
> > > > > tryied
> > > > > to
> > > > > > > remove with aduc without sucess.
> > > > > >
> > > > > > # ldbdel -H /usr/local/samba/private/sam.ldb
> > > > > > 'CN=demo03,CN=Users,DC=samdom,DC=example,DC=com'
> > > > > >
> > > > > >
> > > > > > BTW: Here's a good LDB introduction:
> > > > > > https://wiki.samba.org/index.php/LDB
> > > > > >
> > > > > >
> > > > > > Regards,
> > > > > > Marc
> > > > > --
> > > > > To unsubscribe from this list go to the following URL and read the
> > > > > instructions:  https://lists.samba.org/mailman/options/samba
> > > >
> > > >
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and read the
> > > > instructions:  https://lists.samba.org/mailman/options/samba
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>