https://issues.apache.org/bugzilla/show_bug.cgi?id=49633

--- Comment #2 from Tom McLaughlin <[email protected]> 2010-07-23 
13:01:06 EDT ---
With AD neither of those exist.  Here's both my user and the Domain Users group
as they're stored in AD.  (Pulled this with py-ldap.)

[('CN=TMCLAUGHLIN,CN=Users,DC=example,DC=com',
  {'accountExpires': ['129278192266610000'],
   'adminCount': ['1'],
   'badPasswordTime': ['129242031791197715'],
   'badPwdCount': ['0'],
   'cn': ['TMCLAUGHLIN'],
   'codePage': ['0'],
   'countryCode': ['0'],
   'dSCorePropagationData': ['20100412182352.0Z',
                             '20100412182158.0Z',
                             '16010101000417.0Z'],
   'description': ['Systems Administrator'],
   'displayName': ['McLaughlin,Thomas'],
   'distinguishedName': ['CN=TMCLAUGHLIN,CN=Users,DC=example,DC=com'],
   'gidNumber': ['10002'],
   'instanceType': ['4'],
   'lastLogoff': ['0'],
   'lastLogon': ['129243748272588172'],
   'lastLogonTimestamp': ['129243298494895070'],
   'loginShell': ['/bin/bash'],
   'logonCount': ['65535'],
   'logonHours':
['\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\
xff\xff\xff\xff\xff\xff'],
   'memberOf': ['CN=Employee,OU=Groups,DC=example,DC=com',
                'CN=Radius Admins,OU=Groups,DC=example,DC=com',
                'CN=Domain Server Admin,OU=Groups,DC=example,DC=com',
                'CN=Schema Admins,OU=Groups,DC=example,DC=com',
                'CN=Domain Admins,OU=Groups,DC=example,DC=com',
                'CN=Enterprise Admins,OU=Groups,DC=example,DC=com'],
   'msSFU30Name': ['TMCLAUGHLIN'],
   'msSFU30NisDomain': ['example'],
   'name': ['TMCLAUGHLIN'],
   'objectCategory':
['CN=Person,CN=Schema,CN=Configuration,DC=example,DC=com'],
   'objectClass': ['top', 'person', 'organizationalPerson', 'user'],
   'objectGUID': ['\xa4~\x932\x86\x85vC\x8f\x13\xda\x96a\\\x0b\xc0'],
   'objectSid':
['\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x007~;e\xa0\x07\x
e4I\x18IF\x17\xfa\x1f\x00\x00'],
   'primaryGroupID': ['513'],
   'pwdLastSet': ['129234992266771052'],
   'sAMAccountName': ['TMCLAUGHLIN'],
   'sAMAccountType': ['805306368'],
   'scriptPath': ['Default.bat'],
   'uSNChanged': ['99938168'],
   'uSNCreated': ['30981'],
   'uid': ['tmclaughlin'],
   'uidNumber': ['10000'],
   'unixHomeDirectory': ['/home/tmclaughlin'],
   'userAccountControl': ['512'],
   'whenChanged': ['20100723033758.0Z'],
   'whenCreated': ['20070304152704.0Z']})]


[('CN=Domain Users,OU=Groups,DC=example,DC=com',
  {'cn': ['Domain Users'],
   'dSCorePropagationData': ['20100412182218.0Z',
                             '20100412181952.0Z',
                             '20091218151750.0Z',
                             '20091216205638.0Z',
                             '16010714223649.0Z'],
   'description': ['All domain users'],
   'distinguishedName': ['CN=Domain Users,OU=Groups,DC=example,DC=com'],
   'gidNumber': ['10002'],
   'groupType': ['-2147483646'],
   'instanceType': ['4'],
   'isCriticalSystemObject': ['TRUE'],
   'memberOf': ['CN=Users,CN=Builtin,DC=example,DC=com'],
   'msSFU30Name': ['Domain Users'],
   'msSFU30NisDomain': ['example'],
   'name': ['Domain Users'],
   'objectCategory': ['CN=Group,CN=Schema,CN=Configuration,DC=example,DC=com'],
   'objectClass': ['top', 'group'],
   'objectGUID': ['[\x1b>Jo\x12\x1bB\xb2\xe6\x8b[\rV\xf4S'],
   'objectSid':
['\x01\x05\x00\x00\x00\x00\x00\x05\x15\x00\x00\x007~;e\xa0\x07\x
e4I\x18IF\x17\x01\x02\x00\x00'],
   'sAMAccountName': ['Domain Users'],
   'sAMAccountType': ['268435456'],
   'uSNChanged': ['81880376'],
   'uSNCreated': ['7589'],
   'whenChanged': ['20100205162639.0Z'],
   'whenCreated': ['20070304152927.0Z']})]

The only reliable way to get the user's primary group is to get the group RID
from the user's PrimaryGroupID and then search for the group using
'objectSid=<Domain SID>-<RID>'

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to