Can't create new user when there are Baltic diacrytic symbols in users Full name

[kellerman (Aivis)]

Hello. After recent samba nsdc update the domain works like a treat, no issues, 22H2 also works after upgrading, big thanks to the devs again!!!
But I came upon a problem, that wasn’t there before.
When adding a user testuser1 with full name Janis Žvīgurs the user-create event fails:
/var/log/messages output:

Nov 23 13:08:26 server esmith::event[18956]: Event: user-create testuser1 Janis Žvīgurs /usr/libexec/openssh/sftp-server
Nov 23 13:08:26 server esmith::event[18956]: ERROR(<class 'TypeError'>): Failed to add user 'testuser1':  - unable to import element 'givenName'
Nov 23 13:08:26 server esmith::event[18956]:  File "/usr/lib64/python3.6/site-packages/samba/netcmd/user.py", line 374, in run
Nov 23 13:08:26 server esmith::event[18956]:    smartcard_required=smartcard_required)
Nov 23 13:08:26 server esmith::event[18956]:  File "/usr/lib64/python3.6/site-packages/samba/samdb.py", line 640, in newuser
Nov 23 13:08:26 server esmith::event[18956]:    self.add(ldbmessage)
Nov 23 13:08:26 server esmith::event[18956]: [ERROR] User testuser1 creation failed
Nov 23 13:08:26 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S40nethserver-dc-user-create FAILED: 255 [0.431201]
Nov 23 13:08:27 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S50nethserver-dc-sync-upn SUCCESS [0.478135]
Nov 23 13:08:27 server esmith::event[18956]: [NOTICE] clearing sssd cache for user testuser1@gymn.local
Nov 23 13:08:27 server esmith::event[18956]: No cache object matched the specified search
Nov 23 13:08:27 server esmith::event[18956]: No cache object matched the specified search
Nov 23 13:08:27 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S90nethserver-sssd-clear-cache SUCCESS [0.017727]
Nov 23 13:08:27 server esmith::event[18956]: Event: user-create FAILED

When correcting the name to Janis Zvigurs the user-create event succeeds and the missing symbols can be added by editing the user afterwards.
The event fails both from using the server GUI or by using the /usr/share/doc/nethserver-sssd-$(sssd_version)/scripts/import_users script

[davidep (Davide Principi)]

Thank you for the bug report!

I confirm I can reproduce it.

@kellerman

When correcting the name to Janis Zvigurs the user-create event succeeds and the missing symbols can be added by editing the user afterwards.

Confirmed That’s a valid workaround too.

Filed a bug here

Failed to add an AD user with special char in name

---

Did anybody test if the bug is reproducible on a new installation? And is the workaround still effective?

[davidep (Davide Principi)]

@davidep

Did anybody test if the bug is reproducible on a new installation? And is the workaround still effective?

• The bug is reproducible
• The workaround is effective

Kudos to @nrauso for trying it!

[pike (Michael Kicks)]

Hail (again) for @nrauso, AD container’s guardian angel

[kellerman (Aivis)]

Thanks for confirming the bug.
It is not a big trouble. I add/remove approx. 10-15users per month. I now just correct the name after creation. I use the built-in scripts to add/delete users.
Hope there is a simple fix!

[davidep (Davide Principi)]

There’s a package to test from nethserver-testing:

yum --enablerepo=nethserver-testing update nethserver-dc

@kellerman could you check it out?

[kellerman (Aivis)]

I will test when I finish other stuff, I’ll report then.

[davidep (Davide Principi)]

Fix released in nethserver-dc-1.9.1-1.ns7.x86_64.rpm

[kellerman (Aivis)]

Tested and working! Thanks for quick support!