https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243221
Resolves: bug 243221
Bug Description: The directory synchronization between DS and
Active Directory fails if an entry has an initials attribute
containing too many characters. There is no constraint on the
DS side, so the sync should handle this better than failing. It
should ignore the attribute or truncate it and flag a warning,
or skip the invalid entry.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: These diffs address the attribute length constraint
of the "initials" attribute by trimming attribute values larger than
the 6 character limit imposed by AD. This trimming occurs in the
DS -> AD direction only.
What this means is that you can store an initials attribute value of
"longname" in DS, but the value will be trimmed to "longna" when
sent to AD. This trimmed attribute will not be synch'd back to DS
on the next Dirsync operation. This case is handled by only comparing
the first 6 characters of the initials attribute value when changes go
in the AD -> DS direction.
Platforms tested: FC6
Flag Day: no
Doc impact: Yes. We should document the trimming behavior of the
initials attribute.
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=172375&action=...