Issue

Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute

User "dn" in AD

dn: CN=test user,OU=Junta de Accion Local,OU=example,DC=com
(test user has 2 spaces in between)

Attempts to sync IPA with AD fails :

ipa-replica-manage  re-initialize --from ad.example.com
reports: Update failed! Status: [-1 Total update abortedLDAP error: Can't contact LDAP server]

we see the following query is being

SRCH base="CN=test user,OU=Junta de Accion Local,OU=example,DC=com" ( CN=test user contains only one space)

Thus Active Directory returns "NameErr: DSID-0310020A, problem 2001 (NO_OBJECT)" as the "dn"s differ in the space removed by the IPA server. When finding this error, the replica fails and does not continue.