[Samba] samba-tool ldapcmp checks

[Rowland Penny]

On Fri, 25 May 2018 10:01:34 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

> Hai, 
>  
> Can someone help me in the following or help explaining this. 
>  
> i did a check on my db replication, no operational problems here, it
> works all fine but the samba-tool ldapcmp check isnt correct. 
> I run the following.  samba-tool ldapcmp
> ldap://dc1.internal.domain.tld  ldap://dc2.internal.domain.tld 
> A few examples of the output. 
> Comparing:
> 'CN=access-MOBILE-read,OU=Groups,OU=Company,DC=internal,DC=domain,DC=tld' [ldap://dc1.internal.domain.tld]
> 'CN=access-MOBILE-read,OU=Groups,OU=Company,DC=internal,DC=domain,DC=tld' [ldap://dc2.internal.domain.tld]
>     Attributes found only in ldap://dc1.internal.domain.tld:
>         cn
>     Attributes found only in ldap://dc2.internal.domain.tld:
>         CN
>     FAILED
>  
> Comparing:
> 'DC=COMPUTERNAME1,DC=internal.domain.tld,CN=MicrosoftDNS,DC=DomainDnsZones,DC=internal,DC=domain,DC=tld' [ldap://dc1.internal.domain.tld]
> 'DC=COMPUTERNAME1,DC=internal.domain.tld,CN=MicrosoftDNS,DC=DomainDnsZones,DC=internal,DC=domain,DC=tld' [ldap://dc2.internal.domain.tld]
>     Attributes found only in ldap://dc1.internal.domain.tld:
>         dc
>     Attributes found only in ldap://dc2.internal.domain.tld:
>         DC
>     FAILED
>  
> I dont see the the difference here.  and ;-) yes, i have my glasses
> on...  so the output is incorrect. Now i can manualy fix this but is
> there command that check/fixed these things. 
> Samba 4.8.2 is running now, this AD database is from 1 juni 2015
> (samba 4.1.*) , i've inherited some things from the past here.. 
> And yes i also know this is not a problem its as far i can tell a
> cosmetic thing now, but i want it gone .. 
>  
> Greetz, 
>  
> Louis
>  
>  

Hi Louis, there is a difference, cn != CN and dc != DC ;-)

This comes up from time to time and there is not one, but two bug
reports about this, 12599 & 12302

Perhaps someday this will be fixed, but I suppose it has a very low
priority, it is just an annoyance, everything still works.

Rowland