Failed to add an AD user with special char in name

[DavidePrincipi]

When adding a user testuser1 with full name Janis Žvīgurs the user-create event fails.

Steps to reproduce

• System is configured with a local AD accounts provider, recently updated from Samba DC 4.9 to Samba DC 4.16, OR System is freshly installed with Samba AD 4.16
• In System > Users & Groups > Create User
• Use special chars in the Name field

Expected behavior

The new user is created

Actual behavior

Creation fails. In /var/log/messages:

unable to import element 'givenName'

Event log excerpt

Nov 23 13:08:26 server esmith::event[18956]: Event: user-create testuser1 Janis Žvīgurs /usr/libexec/openssh/sftp-server
Nov 23 13:08:26 server esmith::event[18956]: ERROR(<class 'TypeError'>): Failed to add user 'testuser1':  - unable to import element 'givenName'
Nov 23 13:08:26 server esmith::event[18956]:  File "/usr/lib64/python3.6/site-packages/samba/netcmd/user.py", line 374, in run
Nov 23 13:08:26 server esmith::event[18956]:    smartcard_required=smartcard_required)
Nov 23 13:08:26 server esmith::event[18956]:  File "/usr/lib64/python3.6/site-packages/samba/samdb.py", line 640, in newuser
Nov 23 13:08:26 server esmith::event[18956]:    self.add(ldbmessage)
Nov 23 13:08:26 server esmith::event[18956]: [ERROR] User testuser1 creation failed
Nov 23 13:08:26 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S40nethserver-dc-user-create FAILED: 255 [0.431201]
Nov 23 13:08:27 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S50nethserver-dc-sync-upn SUCCESS [0.478135]
Nov 23 13:08:27 server esmith::event[18956]: [NOTICE] clearing sssd cache for user testuser1@gymn.local
Nov 23 13:08:27 server esmith::event[18956]: No cache object matched the specified search
Nov 23 13:08:27 server esmith::event[18956]: No cache object matched the specified search
Nov 23 13:08:27 server esmith::event[18956]: Action: /etc/e-smith/events/user-create/S90nethserver-sssd-clear-cache SUCCESS [0.017727]
Nov 23 13:08:27 server esmith::event[18956]: Event: user-create FAILED

Components

• nethserver-dc-1.9.0-1.ns7.x86_64
• nethserver-sssd-1.7.1-1.ns7.noarch

See also

• https://community.nethserver.org/t/cant-create-new-user/20942
• Cannot login/join AD domain after Windows 11 22H2 update #6702

---

Thanks to kellerman for reporting the bug, @nrauso for reproducing it on a new installation

[DavidePrincipi]

• The error is not reproducible on Samba Version 4.16.4-Ubuntu with Python 3.10. The issue could originate from the NSDC deps bundle which installs Python 3.6 instead.
• The latest Python release available for NSDC from official repositories is 3.8.

[nethbot]

in 7.9.2009/testing:

• nethserver-dc-1.9.0-1.1.g4cfb930.ns7.x86_64.rpm x86_64

[DavidePrincipi]

Test case

Check the bug is not reproducible

[nrauso]

Tested both on fresh installation and in case of update: verfied

[nethbot]

in 7.9.2009/updates:

• nethserver-dc-1.9.1-1.ns7.x86_64.rpm x86_64