#1482 "fullName" in sysdb doesn't match with the "name" ldap attribute on AD Server
Closed: Fixed None Opened 6 years ago by kaushikub.

Set ldap_schema=ad in sssd.conf domain section

From the ldbsearch output, I see that "fullName" and "gecos" are always the same, although on the AD Server, the ldap attributes for the user: "gecos" and "name" are different.

e.g.

# ldapsearch -x -D "cn=Administrator,cn=Users,dc=sssdad,dc=com" -w XXXX -h 10.65.206.100 -b "cn=Users,dc=sssdad,dc=com" uid=testuser3 name gecos -LLL
dn: CN=testuser3,CN=Users,DC=sssdad,DC=com
name: testuser3
gecos: GECOS TESTUSER3


# ldbsearch -H /var/lib/sss/db/cache_ADTEST.ldb name=testuser3 fullName gecos
asq: Unable to register control with rootdse!
# record 1
dn: name=testuser3,cn=users,cn=ADTEST,cn=sysdb
fullName: GECOS TESTUSER3
gecos: GECOS TESTUSER3

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.9.1
priority: major => minor
rhbz: => 0

Name and fullName seem to be two different attributes. And from the code, it looks that it is intentional to have fullName equal to gecos.

From sysdb_add_basic_user():

    /* We set gecos to be the same as fullname on user creation,
     * But we will not enforce coherency after that, it's up to
     * admins to decide if they want to keep it in sync if they change
     * one of the 2 */
    if (gecos && *gecos) {
        ret = add_string(msg, LDB_FLAG_MOD_ADD, SYSDB_FULLNAME, gecos);
        if (ret) goto done;
        ret = add_string(msg, LDB_FLAG_MOD_ADD, SYSDB_GECOS, gecos);
        if (ret) goto done;
    }

_comment0: Name and fullName seems to be two different attributes. And from the code, it looks that it is intentional to have fullName equal to gecos.

From sysdb_add_basic_user():
{{{
/ We set gecos to be the same as fullname on user creation,
* But we will not enforce coherency after that, it's up to
* admins to decide if they want to keep it in sync if they change
* one of the 2
/
if (gecos && *gecos) {
ret = add_string(msg, LDB_FLAG_MOD_ADD, SYSDB_FULLNAME, gecos);
if (ret) goto done;
ret = add_string(msg, LDB_FLAG_MOD_ADD, SYSDB_GECOS, gecos);
if (ret) goto done;
}
}}}
=> 1349349656462429

Fields changed

milestone: SSSD 1.9.1 => SSSD 1.9.2

In the AD case it probably make sense to deefault to 'Name' (or CN, IIRC they are the same) for the Full Name.

We'll look at this task during the 1.9.3 cycle. Sorry for the constant rescheduling.

Fields changed

milestone: SSSD 1.9.2 => SSSD 1.9.3

Fields changed

owner: somebody => pbrezina
status: new => assigned

Fields changed

patch: 0 => 1

master:
- ec2102d
- 45e2a56

design: =>
design_review: => 0
fedora_test_page: =>
resolution: => fixed
status: assigned => closed

Metadata Update from @kaushikub:
- Issue assigned to pbrezina
- Issue set to the milestone: SSSD 1.9.3

2 years ago

Login to comment on this ticket.

Metadata