<div dir="ltr">I've opened a ticket on PAM's bug tracker: <a href="https://fedorahosted.org/linux-pam/ticket/22">https://fedorahosted.org/linux-pam/ticket/22</a><div><br></div><div>Thanks to Stephen and Jakub for all your help!</div>
<div class="gmail_extra"><div><div><br></div>-Chris</div>
<br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 2:00 PM, Stephen Gallagher <span dir="ltr"><<a href="mailto:sgallagh@redhat.com" target="_blank">sgallagh@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
</div><div class="im">On 10/09/2013 01:06 PM, Chris Hartman wrote:<br>
> Could you file a bug against pam_mkhomedir?<br>
><br>
> I can definitely do this, though I'm not exactly sure what the bug<br>
> is because I don't think I understand the problem fully.<br>
> "mkhomedir.so doesn't play nice with aliased usernames"? Can you<br>
> offer a little more guidance and/or explanation?<br>
><br>
<br>
</div>Basically, when pam_mkhomedir.so is invoked, it has a substitution<br>
template that it fills in with the username. Apparently, it is taking<br>
the input value from PAM as this substitution value, but if you happen<br>
to be logging in the first time from an alias (anything other than the<br>
canonical version, which is the lower-case one in this example), it<br>
creates the directory with that instead of the canonical one.<br>
<div class="im"><br>
<br>
> When running id_provider = ad, we default to operating in<br>
> case-insensitive mode.<br>
><br>
> Is there a config option that exposes case sensitivity mode? If<br>
> not, such a feature might be useful. Not sure if that is<br>
> programmatically feasible/practical, though.<br>
><br>
<br>
</div>- From the AD provider manpage<br>
(<a href="http://jhrozek.fedorapeople.org/sssd/1.11.1/man/sssd-ad.5.html" target="_blank">http://jhrozek.fedorapeople.org/sssd/1.11.1/man/sssd-ad.5.html</a>):<br>
"Users, groups and other entities served by SSSD are always treated as<br>
case-insensitive in the AD provider for compatibility with Active<br>
Directory's LDAP implementation."<br>
<br>
- From the sssd.conf manpage<br>
(<a href="http://jhrozek.fedorapeople.org/sssd/1.11.1/man/sssd.conf.5.html" target="_blank">http://jhrozek.fedorapeople.org/sssd/1.11.1/man/sssd.conf.5.html</a>):<br>
<br>
<br>
case_sensitive (boolean)<br>
<br>
Treat user and group names as case sensitive. At the moment, this<br>
option is not supported in the local provider.<br>
<br>
Default: True<br>
<br>
<br>
<br>
Essentially, using 'id_provider = ad' implies 'case_sensitive = False'<br>
<div class="im">-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.14 (GNU/Linux)<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
</div>iEYEARECAAYFAlJVmbIACgkQeiVVYja6o6PUQgCfU5J5mg7Q/XpZQ8Dwdv+ORjKa<br>
VZsAnjXosUGYG28bQmnTl+XwDkU5Mjx8<br>
=ufaB<br>
<div class="HOEnZb"><div class="h5">-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
sssd-users mailing list<br>
<a href="mailto:sssd-users@lists.fedorahosted.org">sssd-users@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/sssd-users" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/sssd-users</a><br>
</div></div></blockquote></div><br></div></div>