I would strongly discourage the use of all numeric usernames.  They will only 
cause you grief in the long term especially when uids and user names overlap.  
For example, to expand on Sumit's comment,

# id 12345
# getent passwd 12345

Is this the user 12345 or the uid 12345?  I would encourage you to google for 
"unix username conventions" and you'll see what others recommend when it comes 
to user names.  Once upon a time I found where someone posted what the OS is 
actually expecting but a quick google didn't surface it so I'll leave that as 
an exercise to the user :-).

=G=

________________________________________
From: Sumit Bose <[email protected]>
Sent: Thursday, January 12, 2017 3:56 AM
To: [email protected]
Subject: [SSSD-users] Re: All numeric User ID in the Kerberos Provider

On Wed, Jan 11, 2017 at 11:14:40AM -0800, Ali, Saqib wrote:
> Hello all,
>
> The kerberos provider (Active Directory) in our environments uses all
> numeric username. If we configure SSSD to use Active Directory for the
> Auth Provider, then we will end up with the All-number Usernames on
> Linux.
>
> What are our options?

In general SSSD should be fine here but afaik we do not test this kind
of setup.

However many system tools check if the input is numeric and assume that
the input is a POSIX ID in this case. So as long as the number used for
the numeric user name is not that same as the POSIX UID of the user I
would strictly recommend against it (btw what about the group names?).

bye,
Sumit

>
> Note: We are using the Oracle Directory Server as the Principal Database.
>
>
>
>
> Thanks,
> Saqib
>
> ----
> _______________________________________________
> sssd-users mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to