Hey Sumit, HDFS and our Hadoop suite is running into issues when users are uppercased. So we’re looking into a few possible ways around this.
My ask here is just one of the avenues we’re exploring. I’m going to try a few of the suggestions from this thread to see if they work. Using the first option unfortunately didn’t. Our workstations and accounts were recently updated and I suspect some need drove the AD team to shuffle things around in order to get things to work. Unfortunately that causes some minor collateral damage on our end. SSSD has been accommodating with regards to such variances and hence the question here. Cheers, Tom Sent from my iPhone > On Oct 27, 2018, at 10:09 AM, Sumit Bose <[email protected]> wrote: > >> On Fri, Oct 26, 2018 at 03:32:59PM -0400, Tom wrote: >> Doesn’t look like this will work for us. Ad side is not right. > > Yes, first account would be 'Administrator'. That's why I said 'make > sure the canonical principal on the KDC is in lower case' which might be > hard with AD. > > What's the reason you need the name in lower-case? > > bye, > Sumit > >> >> Sent from my iPhone >> >>> On Oct 26, 2018, at 12:15 PM, Tom <[email protected]> wrote: >>> >>> Thanks Sumit. And canonicalize = yes in [libdefaults] will make that >>> happen on login I think. >>> >>> Sent from my iPhone >>> >>>>> On Oct 26, 2018, at 11:40 AM, Sumit Bose <[email protected]> wrote: >>>>> >>>>> On Fri, Oct 26, 2018 at 11:03:05AM -0400, Tom wrote: >>>>> Is there a way to ensure the principal generated has the lowercase user >>>>> not an uppercase user showing up in kinit? >>>> >>>> The principal is part of the ticket generated by the KDC. So you have to >>>> make sure the canonical principal on the KDC is in lower case and use >>>> canonicalization on the client side ('-C' with kinit). >>>> >>>> HTH >>>> >>>> bye, >>>> Sumit >>>> >>>>> >>>>> Cheers, >>>>> Tom >>>>> >>>>> Sent from my iPhone >>>>> _______________________________________________ >>>>> sssd-users mailing list -- [email protected] >>>>> To unsubscribe send an email to [email protected] >>>>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >>>>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >>>>> List Archives: >>>>> https://lists.fedorahosted.org/archives/list/[email protected] >>>> _______________________________________________ >>>> sssd-users mailing list -- [email protected] >>>> To unsubscribe send an email to [email protected] >>>> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >>>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >>>> List Archives: >>>> https://lists.fedorahosted.org/archives/list/[email protected] >>> >> _______________________________________________ >> sssd-users mailing list -- [email protected] >> To unsubscribe send an email to [email protected] >> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/[email protected] > _______________________________________________ > sssd-users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/[email protected] _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
