[Fedora-directory-devel] Please Review: (243221) AD Directory sync fails if attribute 'initials' has too many characters in one of the entries

[Nathan Kinder]

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243221
Resolves: bug 243221
Bug Description: The directory synchronization between DS and
  Active Directory fails if an entry has an initials attribute
  containing too many characters. There is no constraint on the
  DS side, so the sync should handle this better than failing. It
  should ignore the attribute or truncate it and flag a warning,
  or skip the invalid entry.
Reviewed by: ???
Files: see diff
Branch: HEAD
Fix Description: These diffs address the attribute length constraint
  of the "initials" attribute by trimming attribute values larger than
  the 6 character limit imposed by AD.  This trimming occurs in the
  DS -> AD direction only.

  What this means is that you can store an initials attribute value of
  "longname" in DS, but the value will be trimmed to "longna" when
  sent to AD.  This trimmed attribute will not be synch'd back to DS
  on the next Dirsync operation.  This case is handled by only comparing
  the first 6 characters of the initials attribute value when changes go
  in the AD -> DS direction.
Platforms tested: FC6
Flag Day: no
Doc impact: Yes.  We should document the trimming behavior of the 
initials attribute.
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=172375&action=diff
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-devel/attachments/20070823/7c299978/attachment.bin