adamwill / 389-ds-base

Forked from 389-ds-base 4 years ago
Clone

f95bc25 Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error

Authored and Committed by Noriko Hosoi 11 years ago
    Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
    
    https://fedorahosted.org/389/ticket/500
    
    Bug description: Posix Account objectclass requires homeDirectory,
    uidNumber, and gidNumber.  When an AD entry has just some of these
    attributes or other allow-to-have attributes, i.e., loginShell or
    gecos, the entry is incompletely converted to Posix Account entry
    and fails to be added due to the missing attribute error.
    
    Fix description: Before transforming the AD entry to the DS posix
    account entry, check the required attributes first.  If any of the
    above 3 attributes is missing, all of the posix account related
    attributes are dropped and added to the DS as a non-posix account
    entry.  If the PLUGIN log level is set, this type of message is
    logged in the error log.
    [] posix-winsync - AD entry CN=<CN>,OU=<OU>,DC=<DC>,DC=<COM> does
    not have required attribute uidNumber for posixAccount objectclass.
    (cherry picked from commit 19e49e69124ff19530a584f90808aa652a4c686f)