On 02/02/2011 02:10 AM, Carsten Grzemba wrote:
We synchronize AD user with the directory server.
We have the problem that the users are created in AD with the notation "lastname,
firstname" (CN). Since the directory server, the DN formed from the UID all is right.
The CN also is also the same.
However if syncing groups, then the member attributes from AD (CN's include the comma
and space) through slapi_dn_normalize_ext will normalized. Then the comma is replaced by
\2C and the space after the comma is deleted.
Without the space, these users are not found anymore and the attribute uniqueMember stay
empty.
I think to remove the space after the escaped comma is a mistake. ?
What version of
389-ds-base are you using? I believe that I fixed this
issue a little while back. It is correct to remove the space if the
attribute used in the DN element is defined to use the Distinguished
Name syntax. The CN attribute is not using this syntax, which is the
bug that I fixed.
Thanks,
-NGK
Regards,
Carsten
--
389-devel mailing list
389-devel(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-devel