[Freeipa-users] Re: Compat tree question

2017-05-31 Thread Jakub Hrozek via FreeIPA-users
On Tue, May 30, 2017 at 09:27:05PM +0300, Alexander Bokovoy via FreeIPA-users wrote: > On ti, 30 touko 2017, Robert Johnson via FreeIPA-users wrote: > > So I took a brand new user that I have never used in the system before (I > > checked that the entry was not in the compat tree) and just ran an

[Freeipa-users] Re: Compat tree question

2017-05-30 Thread Alexander Bokovoy via FreeIPA-users
On ti, 30 touko 2017, Robert Johnson via FreeIPA-users wrote: Is there a option in SSSD or the plugin to turn off the normalization ? No. But as I said, you are not supposed to use all capital fqdn. You need to use your user/group name as it is. id user@ad.realm kinit user@AD.REALM are two di

[Freeipa-users] Re: Compat tree question

2017-05-30 Thread Robert Johnson via FreeIPA-users
Is there a option in SSSD or the plugin to turn off the normalization ? On Tue, May 30, 2017 at 2:27 PM, Alexander Bokovoy wrote: > On ti, 30 touko 2017, Robert Johnson via FreeIPA-users wrote: > >> So I took a brand new user that I have never used in the system before (I >> checked that the ent

[Freeipa-users] Re: Compat tree question

2017-05-30 Thread Alexander Bokovoy via FreeIPA-users
On ti, 30 touko 2017, Robert Johnson via FreeIPA-users wrote: So I took a brand new user that I have never used in the system before (I checked that the entry was not in the compat tree) and just ran an "id" command on Solaris system. I then looked in the /var/log/dirsrv/slapd-/access log file o

[Freeipa-users] Re: Compat tree question

2017-05-30 Thread Robert Johnson via FreeIPA-users
So I took a brand new user that I have never used in the system before (I checked that the entry was not in the compat tree) and just ran an "id" command on Solaris system. I then looked in the /var/log/dirsrv/slapd-/access log file on the ipa server, for the query and from the log file, the query

[Freeipa-users] Re: Compat tree question

2017-05-30 Thread Alexander Bokovoy via FreeIPA-users
On ti, 30 touko 2017, Robert Johnson via FreeIPA-users wrote: Red Hat Enterprise Linux Server release 7.3 ipa-server-4.4.0-14.el7_3.4.x86_64 389-ds-base-1.3.5.10-15.el7_3.x86_64 sssd-1.14.0-43.el7_3.11.x86_64 When looking at entries in the "cn=groups,cn=compat" tree, I noticed that the entries f