[Samba] re： access domain via ldap failed

[Rowland Penny]

On Fri, 20 Apr 2018 13:04:41 +0200
"Dr. Peer-Joachim Koch via samba" <samba at lists.samba.org> wrote:

> Perfect !
> 
> You are right.
> objectClass: posixAccount was missing and caused the problems.
> 

Are you saying 'posixAccount' is missing from the new users in AD?
If so, can I tell you that it is supposed to be missing, you should not
rely on the 'Posix' objectclasses in AD. Neither Windows or samba-tool
adds them because they are auxiliary objectclasses and, as such, are
never added.

So if the OX ldap search relies on them against AD, it is broken.

Rowland