So we're working along our SL6 and AD Server 2008R2 integration, using SSSD for authentication and such. We've realized that AD won't allow groups and users to have the same name. For common software like puppet and quemu that has this setup, what do you do? Change the program configuration to use a different group name? Do some hackery with OUs and sAMAccountNames and have it use gids (do the right things do this)? Technet says sAMAccountName must be unique and cannot be munged...
-- James Pulver LEPP Computer Group Cornell University
