samba - Nov 2016 - samba 4.5.1 DC: attribute names are upper-case converted on replication

Hi,

I have set up a fresh DC from scratch using samba 4.5.1 with Bind9, 
added another DC, all strictly following the instructions in the samba wiki.

Samba was built from the source tarball on debian/raspbian 8u8 (Jessie), 
Bind9 is 9.9.5-9 coming with the OS.

Everything appears to be in a working order: I can join Windows 
workstations, add Users with RSAT, etc.

Only when comparing the content of the two DCs I get a strange result, 
some attribute names become upper-case on the second DC:


samba-tool ldapcmp ldap://dc1 ldap://dc2 domain --filter=whenChanged

shows countless records like

    Comparing:
'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc1]
'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc2]
Attributes found only in ldap://dc1:
ou
Attributes found only in ldap://dc2:
OU
FAILED

and the final result

* Result for [DOMAIN]: FAILURE


SUMMARY
---------

Attributes found only in ldap://dc1:

ou
cn
dc

Attributes found only in ldap://dc2:

OU
CN
DC
ERROR: Compare failed: -1


Is that the expected behaviour, or did I do something wrong?

I assume that the attribute case does not matter, but why does then 
ldapcmp complain about the difference in case?


regards,

Norbert

hi, 

there are just 2 bug-rports:
https://bugzilla.samba.org/show_bug.cgi?id=12399
https://bugzilla.samba.org/show_bug.cgi?id=12302

Regards,
Heinz
 
Am Donnerstag, 17. November 2016 00:00 CET, Norbert Hanke via samba <samba at
lists.samba.org> schrieb:
 
> Hi,
> 
> I have set up a fresh DC from scratch using samba 4.5.1 with Bind9, 
> added another DC, all strictly following the instructions in the samba
wiki.
> 
> Samba was built from the source tarball on debian/raspbian 8u8 (Jessie), 
> Bind9 is 9.9.5-9 coming with the OS.
> 
> Everything appears to be in a working order: I can join Windows 
> workstations, add Users with RSAT, etc.
> 
> Only when comparing the content of the two DCs I get a strange result, 
> some attribute names become upper-case on the second DC:
> 
> 
> samba-tool ldapcmp ldap://dc1 ldap://dc2 domain --filter=whenChanged
> 
> shows countless records like
> 
>     Comparing:
> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc1]
> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc2]
> Attributes found only in ldap://dc1:
> ou
> Attributes found only in ldap://dc2:
> OU
> FAILED
> 
> and the final result
> 
> * Result for [DOMAIN]: FAILURE
> 
> 
> SUMMARY
> ---------
> 
> Attributes found only in ldap://dc1:
> 
> ou
> cn
> dc
> 
> Attributes found only in ldap://dc2:
> 
> OU
> CN
> DC
> ERROR: Compare failed: -1
> 
> 
> Is that the expected behaviour, or did I do something wrong?
> 
> I assume that the attribute case does not matter, but why does then 
> ldapcmp complain about the difference in case?
> 
> 
> regards,
> 
> Norbert
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba 
-- 
Heinz Hölzl
EDV-Abteilung | Ripartizione EDP
Südtiroler Gemeindenverband Genossenschaft
Consorzio dei Comuni della Provincia di Bolzano Societá Cooperativa
I – 39100 Bozen – Kanonikus-Michael-Gamper-Straße 10
I – 39100 Bolzano – via Canonico Michael Gamper 10

https://bugzilla.samba.org/show_bug.cgi?id=12302

On Wed, Nov 16, 2016 at 7:00 PM, Norbert Hanke via samba <
samba at lists.samba.org> wrote:
> Hi,
>
> I have set up a fresh DC from scratch using samba 4.5.1 with Bind9, added
> another DC, all strictly following the instructions in the samba wiki.
>
> Samba was built from the source tarball on debian/raspbian 8u8 (Jessie),
> Bind9 is 9.9.5-9 coming with the OS.
>
> Everything appears to be in a working order: I can join Windows
> workstations, add Users with RSAT, etc.
>
> Only when comparing the content of the two DCs I get a strange result,
> some attribute names become upper-case on the second DC:
>
>
> samba-tool ldapcmp ldap://dc1 ldap://dc2 domain --filter=whenChanged
>
> shows countless records like
>
>    Comparing:
> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc1]
> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc2]
> Attributes found only in ldap://dc1:
> ou
> Attributes found only in ldap://dc2:
> OU
> FAILED
>
> and the final result
>
> * Result for [DOMAIN]: FAILURE
>
>
> SUMMARY
> ---------
>
> Attributes found only in ldap://dc1:
>
> ou
> cn
> dc
>
> Attributes found only in ldap://dc2:
>
> OU
> CN
> DC
> ERROR: Compare failed: -1
>
>
> Is that the expected behaviour, or did I do something wrong?
>
> I assume that the attribute case does not matter, but why does then
> ldapcmp complain about the difference in case?
>
>
> regards,
>
> Norbert
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Thanks Heinz,

Indeed, and the patch
https://bugzilla.samba.org/attachment.cgi?id=12611
given in https://bugzilla.samba.org/show_bug.cgi?id=12399 cures the 
problem, I can confirm that.

regards,
Norbert


On 17.11.2016 07:50, Heinz Hölzl via samba wrote:
>   
>   hi,
>
> there are just 2 bug-rports:
> https://bugzilla.samba.org/show_bug.cgi?id=12399
> https://bugzilla.samba.org/show_bug.cgi?id=12302
>
> Regards,
> Heinz
>   
> Am Donnerstag, 17. November 2016 00:00 CET, Norbert Hanke via samba
<samba at lists.samba.org> schrieb:
>   
>> Hi,
>>
>> I have set up a fresh DC from scratch using samba 4.5.1 with Bind9,
>> added another DC, all strictly following the instructions in the samba
wiki.
>>
>> Samba was built from the source tarball on debian/raspbian 8u8
(Jessie),
>> Bind9 is 9.9.5-9 coming with the OS.
>>
>> Everything appears to be in a working order: I can join Windows
>> workstations, add Users with RSAT, etc.
>>
>> Only when comparing the content of the two DCs I get a strange result,
>> some attribute names become upper-case on the second DC:
>>
>>
>> samba-tool ldapcmp ldap://dc1 ldap://dc2 domain --filter=whenChanged
>>
>> shows countless records like
>>
>>      Comparing:
>> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc1]
>> 'OU=Domain Controllers,DC=ad,DC=sprungweg,DC=ch' [ldap://dc2]
>> Attributes found only in ldap://dc1:
>> ou
>> Attributes found only in ldap://dc2:
>> OU
>> FAILED
>>
>> and the final result
>>
>> * Result for [DOMAIN]: FAILURE
>>
>>
>> SUMMARY
>> ---------
>>
>> Attributes found only in ldap://dc1:
>>
>> ou
>> cn
>> dc
>>
>> Attributes found only in ldap://dc2:
>>
>> OU
>> CN
>> DC
>> ERROR: Compare failed: -1
>>
>>
>> Is that the expected behaviour, or did I do something wrong?
>>
>> I assume that the attribute case does not matter, but why does then
>> ldapcmp complain about the difference in case?
>>
>>
>> regards,
>>
>> Norbert
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba