sAMAccountName

[Roland Hedberg]

Michael Ströder wrote:
> 
> Roland Hedberg wrote:
>> But when I try to add the samAccountName attribute and thereby the
>> object class SecurityPrincipal the server complains.
> 
> Could you please post a small test script?
> 
> Are you sure the value of the samAccountName does not collide with any
> other user entry?

Oh, absolutely!

I'm now convinced that this all comes down to LDAP schema problems.

The schema file I have describing the AD schema has samAccountName as an
attribute in the 'securityPrincipal' aux class.

But, it turns out that the AD I working against has no problem using the
attribute without adding the 'securityPrincipal' object class.
In fact, in that server the attribute seems to be part of the object
class 'User' !?

I've search the net for up-to-date versions of the AD schema but they
seem hard to get by.

Anyone got a recent version ?

I found one fairly recent but that caused other problems since some
attributes previously part of the standard schema now has move over to
the Microsoft exchange schema.

So anyone got one of those too ?

Sigh !

-- Roland