If a user logs in to a Centos 7.6 system with ipa 4.6.4-10 using a Smartcard 
(gdm-greeter), the output of the `users` command is

user u...@dom.ain 

If a user logs in to the same system with a username and password, the output 
of the `users` command is

user user 

Where could u...@dom.ain be showing up from? it doesn't show up anywhere else 
as far as I can tell. It's been a non-issue, but our Cisco AnyConnect VPN 
configs mandate that only one user be logged in when connecting to VPN. When a 
user logs in with a username and password, the VPN connects. But when a user 
logs in with a smartcard + pin, anyConnect complains multiple users logged in 
and disconnects. 

I believe AnyConnect is looking at the output of `users` and is seeing `user 
u...@dom.ain` and treating that as two different users. 

Why does logging on with a smartcard on this system result in a user called 
u...@dom.ain and how can I change it so that either all of them are just called 
user, or all of them are just called u...@dom.ain. 

Thank you so much! 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to