Hello Everyone,
I have a situation where users' UPN in AD for the domain that my ipa
domain has a trust with has been modified to look nothing like the
domain account. The user name and suffix entered in the UPN don't match
the AD account name or the trusted domain.
I've used ipa trust-mod to add two suffixes where one matches the AD
domain and the other matches what's entered in the UPN.
I've looked through the man pages for sssd-ad and sssd-ldap, but I
didn't immediately see an option that would allow me to modify what's
being searched for the user name in the UPN. I'm looking through the
man pages again. But, I figured I should ask here, too: is it possible
to also modify the "user name" portion of the UPN that's being looked
up for the trusted account?
--
Ranbir