[SSSD] uid with @(at) sign

Stefan Lesicnik stefan at lsd.co.za
Tue Dec 6 07:05:07 UTC 2011


> 
> On Mon, Dec 05, 2011 at 12:37:35PM +0100, Jan Zelený wrote:
> > > Hi,
> > > 
> > > I'm hoping someone can help. I am using RHEL 6.1 and trying to
> > > use sssd to
> > > authenticate to our ldap server.
> > > 
> > > Our ldap server uses the uid=name at domain as the uid. sssd seems
> > > to pass the
> > > name part only. Below is the extract from log. This is generated
> > > by
> > > running getent passwd stefan at lsd.com
> > > 
> > > Originally I had the issue where the @ part of the search was
> > > looking for a
> > > specific sssd provider. I changed my domain to lsd.com. This lets
> > > me
> > > search but as you can see below, passes the filter of uid=stefan
> > > and not
> > > uid=stefan at lsd.com
> > > 
> > > Thanks in advance,
> > > Stefan
> > 
> > Hi Stefan,
> > as I suggested to you on our IRC channel, I still think you should
> > try setting
> > re_expression in the config file so it doesn't translate the part
> > after @ to a
> > domain name. This is what it could look like (not sure though, I
> > don't have a
> > setup which I can test this on):
> > 
> > (?P<name>+$)
> > 
> > 
> > Please try that and let us know.
> > 
> > Jan
> 
> You can just fine-tune the re_expression so it uses a different
> character for name-domain delimeter. This would use the "~" sign:
> 
> re_expression = (?P<name>[^~]+)~?(?P<domain>[^~]*$)

Thanks Jan, Jakub

I got it working by changing the re_expression as above. I guess this would be a common request and this above re would be good in the manual somewhere.
I also discovered I need SSL / TLS for auth, so now im fixing that.

Regards,
Stefan






More information about the sssd-devel mailing list