[Samba] [samba4ad] Duplicate attributes list ?

[Rowland penny]

On 05/02/16 16:27, mathias dufresne wrote:
> Hi all,
>
> I just add into my AD a user with different values for attributes "CN" and
> "name".
>
> Here is an extract of the LDIF used to add this user:
> ------------------------------------------------------------------------------------
> dc202:~# egrep 'cn:|name:' mathias.ldif
> cn: Mathias Dufresne (CN)
> *name: mathias.dufresne*
> ------------------------------------------------------------------------------------
>
> Here is the ldbadd:
> ------------------------------------------------------------------------------------
> dc202:~# ldbadd -H $sam  mathias.ldif
> Added 1 records successfully
> ------------------------------------------------------------------------------------
>
> Here is a search using name attribute as in LDIF::
> ------------------------------------------------------------------------------------
> dc202:~# ldbsearch -H $sam name=mathias.dufresne
> .....
> # returned 3 records
> # *0 entries*
> # 3 referrals
> dc202:~#
> ------------------------------------------------------------------------------------
>
> Here is a search using UPN attribute:
> ------------------------------------------------------------------------------------
> dc202:~# ldbsearch -H $sam userprincipalname=mathias.dufresne* dn name cn
> # record 1
> dn: CN=Mathias Dufresne
> (CN),OU=d,OU=Utilisateurs,DC=ad,DC=dgfip,DC=finances,DC=gouv,DC=fr
> cn: Mathias Dufresne (CN)
> *name: Mathias Dufresne (CN)*
>
> # Referral
> ....
> ------------------------------------------------------------------------------------
>
> So "name" seems to be a duplication of "CN". It seems not possible to have
> different values for for these both attributes name and CN.
>
> Q1: Is that last affirmation true?

Yes, 'name' is the ldapDisplayName for RDN, RDN is 'relative 
distinguished name' and guess what, this is the value of 'cn'

>
> Q2: Is there others attributes like those ones? Is there a list somewhere?

Yes, what are you trying to achieve ? and yes, every Samba install 
should come with the MS-AD-Schema files, on debian they are in 
/usr/share/samba/setup/ad-schema

Rowland

> Best regards,
>
> mathias