[SSSD] GECOS mapping for 'cn' attribute in SSSD.

Stephen Gallagher sgallagh at redhat.com
Wed Oct 27 13:11:00 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/27/2010 08:48 AM, Gowrishankar Rajaiyan wrote:
> 
> Hi All,
> 
> When SSSD is configured for proxy id_provider and a user is enumerated, 
> GECOS field is populated with the ldap server's "cn" attribute.
> 
> # getent -s sss passwd puser1
> puser1:*:1001:1001:Posix User1:/export/puser1:/bin/bash
> 
> However, if SSSD is configured for ldap id_provider and the same user is 
> enumerated, the GECOS field remains empty.
> 
> # getent -s sss passwd puser1
> puser1:*:1001:1001::/export/puser1:/bin/bash
> 
> It looks like nss_ldap switched to defaulting to using 'cn' for the 
> gecos mapping. Perhaps SSSD should do the same?
> 


I'm a bit wary of changing the default for this on an upgrade. If we
decide to make this switch, we need to do so very loudly, so deployments
that are expecting "gecos" know that they'll need to set it explicitly.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkzIJOQACgkQeiVVYja6o6PsPgCdFHXBb9BUILt1rAkXIq6KkKhM
1wgAnjbIh+YLfcX7aQN+tIBU6Vo63tsp
=R4Hf
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list