[Samba] Is it possible to lower the domain and forest functional level

[Andrew Bartlett]

On Mon, 2018-02-19 at 19:07 +0100, Christophe Borivant wrote:
> I made a try translating the group names one by one in the setup/provision_users.ldif file.
> The first groups went OK but when I translate "Incoming Forest Trust Builders" by "Générateurs d'approbations de forêt entrante",
> I get this error from the script :
> Traceback (most recent call last):
>   File "source4/scripting/bin/samba_upgradeprovision", line 1714, in <module>
>     schema, schemareloadclosure):
>   File "source4/scripting/bin/samba_upgradeprovision", line 1360, in update_samdb
>     schema, provisionUSNs, prereloadfunc)
>   File "source4/scripting/bin/samba_upgradeprovision", line 1145, in update_partition
>     add_missing_entries(ref_samdb, samdb, names, basedn, listMissing)
>   File "source4/scripting/bin/samba_upgradeprovision", line 757, in add_missing_entries
>     hashMissing, index)
>   File "source4/scripting/bin/samba_upgradeprovision", line 616, in add_missing_object
>     controls=["search_options:1:2"])
> _ldb.LdbError: (1, 'Unable to parse search expression')
> 
> Could the "ê" be a problem or the length of the string ?

The issue is that this script was never tested with non-ascii names. 
Each instance of 

"(distinguishedName=%s) % user_dn

 in the script needs to be updated to be:

"(distinguishedName=%s)" % ldb.binary_encode(user_dn)

Sorry,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba