On Fri, Oct 26, 2018 at 03:32:59PM -0400, Tom wrote: > Doesn’t look like this will work for us. Ad side is not right.
Yes, first account would be 'Administrator'. That's why I said 'make sure the canonical principal on the KDC is in lower case' which might be hard with AD. What's the reason you need the name in lower-case? bye, Sumit > > Sent from my iPhone > > > On Oct 26, 2018, at 12:15 PM, Tom <[email protected]> wrote: > > > > Thanks Sumit. And canonicalize = yes in [libdefaults] will make that > > happen on login I think. > > > > Sent from my iPhone > > > >>> On Oct 26, 2018, at 11:40 AM, Sumit Bose <[email protected]> wrote: > >>> > >>> On Fri, Oct 26, 2018 at 11:03:05AM -0400, Tom wrote: > >>> Is there a way to ensure the principal generated has the lowercase user > >>> not an uppercase user showing up in kinit? > >> > >> The principal is part of the ticket generated by the KDC. So you have to > >> make sure the canonical principal on the KDC is in lower case and use > >> canonicalization on the client side ('-C' with kinit). > >> > >> HTH > >> > >> bye, > >> Sumit > >> > >>> > >>> Cheers, > >>> Tom > >>> > >>> Sent from my iPhone > >>> _______________________________________________ > >>> sssd-users mailing list -- [email protected] > >>> To unsubscribe send an email to [email protected] > >>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > >>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > >>> List Archives: > >>> https://lists.fedorahosted.org/archives/list/[email protected] > >> _______________________________________________ > >> sssd-users mailing list -- [email protected] > >> To unsubscribe send an email to [email protected] > >> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > >> List Archives: > >> https://lists.fedorahosted.org/archives/list/[email protected] > > > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
