<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="font-family:arial,sans-serif;font-size:13px">Could you file a bug against </span><span style="font-family:arial,sans-serif;font-size:13px">pam_mkhomedir?</span></blockquote>
<div>I can definitely do this, though I'm not exactly sure what the bug is because I don't think I understand the problem fully. "mkhomedir.so doesn't play nice with aliased usernames"? Can you offer a little more guidance and/or explanation?</div>
<div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<span style="font-family:arial,sans-serif;font-size:13px">When running id_provider = ad, we default to operating in </span><span style="font-family:arial,sans-serif;font-size:13px">case-insensitive mode.</span></blockquote>
Is there a config option that exposes case sensitivity mode? If not, such a feature might be useful. Not sure if that is programmatically feasible/practical, though.<div class="gmail_extra"><div><div><br></div>-Chris</div>
<br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 12:37 PM, Stephen Gallagher <span dir="ltr"><<a href="mailto:sgallagh@redhat.com" target="_blank">sgallagh@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<div><br>
On 10/09/2013 12:20 PM, Chris Hartman wrote:<br>
> Well, in a related development, it appears there is a hardware<br>
> issue with the testing PC- bad hard disk. Will replace, reinstall<br>
> OS, and re-test.<br>
><br>
> However, there is definitely a case sensitivity issue happening.<br>
><br>
> My other hosts only have an issue when logging in with Guest as<br>
> opposed to guest. Guest causes /home/guest to be created despite<br>
> what's in the unixHomeDirectory attribute; then I'm always dropped<br>
> in / because "Could not chdir to home directory /tmp/Guest: No such<br>
> file or directory." I imagine this because sssd is lowercasing<br>
> usernames but PAM isn't? "getent passwd guest" always returns the<br>
> same result:<br>
> guest:*:1596000501:1596000514:Guest:/tmp/Guest:/bin/bash<br>
<br>
</div>Hmm, that would be an interesting interaction problem. Yeah, PAM gets<br>
passed *exactly* what you submit to it. Could you file a bug against<br>
pam_mkhomedir? We probably want to have it normalize the lookup by<br>
running getpwnam() itself to deal with aliased usernames (which is<br>
essentially how we deal with case-insensitivity in SSSD; we treat the<br>
name you passed in as an alias for the REAL user, which is the<br>
lowercase version.).<br>
<div><br>
<br>
><br>
> If I login in with guest, everything works as expected (after the<br>
> cache is cleared). It seems strange that I'm even allowed to auth<br>
> with both guest and Guest. Shouldn't one fail? Is this a bug or<br>
> feature?<br>
><br>
<br>
</div>When running id_provider = ad, we default to operating in<br>
case-insensitive mode. That's a feature.<br>
<br>
Now, if they're not returning the same information, that would be a bug.<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.14 (GNU/Linux)<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iEYEARECAAYFAlJVhi0ACgkQeiVVYja6o6PK4QCfer+OI1eaSSeXJt6Az+61O0my<br>
NXIAn3bG12hR9dStnSn4mY+lznj4LbaI<br>
=RxO6<br>
-----END PGP SIGNATURE-----<br>
<div><div>_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org" target="_blank">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br></div></div>