search for: ms679635

Thank you both precisions : ) My users have no "@" in their names (samAccountName nor userPrincipalName nor anything) except in mail attribute). >From https://msdn.microsoft.com/en-us/library/ms679635%28v=vs.85%29.aspx which I read before initial post I understand AD can have this limitation of 20 chars if and only if you decide to support (so) old clients (that we should stop thinking about them). In first table the limit of 20 chars is there. In others tables this limit seems to me pushed up t...

...u both precisions : ) >> >> My users have no "@" in their names (samAccountName nor userPrincipalName >> nor anything) except in mail attribute). >> > > What have you got in userPrincipalName ? > > >> From https://msdn.microsoft.com/en-us/library/ms679635%28v=vs.85%29.aspx >> which I read before initial post I understand AD can have this limitation >> of 20 chars if and only if you decide to support (so) old clients (that we >> should stop thinking about them). >> > > No, you cannot have more than 20 characters, it is s...

...mathias dufresne wrote: > Thank you both precisions : ) > > My users have no "@" in their names (samAccountName nor userPrincipalName > nor anything) except in mail attribute). What have you got in userPrincipalName ? > > From https://msdn.microsoft.com/en-us/library/ms679635%28v=vs.85%29.aspx > which I read before initial post I understand AD can have this limitation > of 20 chars if and only if you decide to support (so) old clients (that we > should stop thinking about them). No, you cannot have more than 20 characters, it is set like this to support old c...

Hi all, Sernet Samba 4.2.2 as Active Directory on Debian 7.8. No other DC. I can't log in with on Windows systems (Windows 7) when samAccountName are longer than 20 characters. This seems to be a LAN MAN or NT4 limitation which should not happen on AD domain. Any idea what could leads my to that limitation? I can log in using administrator account or any other having a short (enough)