sssd experts,
With an AD backend, by default the AD provider sets case_sensitive == False. This has the desired action of lower-casing user names. (and group names). But not home directories.
How can we similarly lower case home directories? Our AD admins have an edict to camel-case their home directory and user name entries in AD. (Apparently, some high-level manager wishes to see user names in camel case.)
In our old commercial AD integration product, it had a setting:
lowercase-homedirs = true
and then it took whatever it found in AD and merely lower cased it.
To sort of work around this problem when doing a sssd migration, we have set:
[nss]
override_homedirs = /home/%u
This works. But effectively, this is throwing out whatever is in AD and replacing it with /home/<lower case user name>
This only works because all our home dirs. are under /home. What about other companies that need to lower-case their home dirs., but they’re not always under /home? How would you lower-case home dirs. in sssd?
Spike
Am Tue, May 04, 2021 at 11:58:56AM -0500 schrieb Spike White:
sssd experts,
With an AD backend, by default the AD provider sets case_sensitive == False. This has the desired action of lower-casing user names. (and group names). But not home directories.
How can we similarly lower case home directories? Our AD admins have an edict to camel-case their home directory and user name entries in AD. (Apparently, some high-level manager wishes to see user names in camel case.)
In our old commercial AD integration product, it had a setting:
lowercase-homedirs = true
and then it took whatever it found in AD and merely lower cased it.
To sort of work around this problem when doing a sssd migration, we have set:
[nss]
override_homedirs = /home/%u
This works. But effectively, this is throwing out whatever is in AD and replacing it with /home/<lower case user name>
This only works because all our home dirs. are under /home. What about other companies that need to lower-case their home dirs., but they’re not always under /home? How would you lower-case home dirs. in sssd?
Hi,
you are right, currently SSSD uses the home directory string provided by AD as is without modifications. I guess you are looking for something like '%o' for override_homedirs which does not add the original value but the lower-case version.
bye, Sumit
Spike
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Sumit,
Yes exactly.
override_homedir = %o
would return the original home directory retrieved from the identity provider. What would be nice is another % flag, which retrieves the original home dir, but lower cases this original home dir. for instance:
override_homedir = %L
(%l is already in use.)
Or an equiv option for case_sensitive (which is for user and groups only). Say:
case_sensitive_homedirs = {True|False|Preserving}
Spike
On Wed, May 5, 2021 at 12:35 AM Sumit Bose sbose@redhat.com wrote:
Am Tue, May 04, 2021 at 11:58:56AM -0500 schrieb Spike White:
sssd experts,
With an AD backend, by default the AD provider sets case_sensitive == False. This has the desired action of lower-casing user names. (and
group
names). But not home directories.
How can we similarly lower case home directories? Our AD admins have an edict to camel-case their home directory and user name entries in AD. (Apparently, some high-level manager wishes to see user names in camel case.)
In our old commercial AD integration product, it had a setting:
lowercase-homedirs = true
and then it took whatever it found in AD and merely lower cased it.
To sort of work around this problem when doing a sssd migration, we have set:
[nss]
override_homedirs = /home/%u
This works. But effectively, this is throwing out whatever is in AD and replacing it with /home/<lower case user name>
This only works because all our home dirs. are under /home. What about other companies that need to lower-case their home dirs., but they’re not always under /home? How would you lower-case home dirs. in sssd?
Hi,
you are right, currently SSSD uses the home directory string provided by AD as is without modifications. I guess you are looking for something like '%o' for override_homedirs which does not add the original value but the lower-case version.
bye, Sumit
Spike
sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.o... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
sssd-users@lists.fedorahosted.org