[SSSD] [sssd PR#5251][comment] [wip] subdomains: allow to inherit case_sensitive=Preserving
URL: https://github.com/SSSD/sssd/pull/5251 Title: #5251: [wip] subdomains: allow to inherit case_sensitive=Preserving sumit-bose commented: """ > RHEL-6 servers should not be affected since it requires changes on both > client and server side SSSD. So RHEL-6 servers will just reply with > lowercased names (since the client will not be updated there) and that's what > the client will use. Thanks for the clarification, I'll see what we can do > about it. Hi, I think it is a bit different. On RHEL-6 there is no SSSD ipa-server mode since all lookups in AD where still done by winbind. And iirc this unconditional lower-casing was added becasue depending on the type of operation winbind might have returned an all-lowercase name or the original spelling and SSSD at this time got confused and considered those as different users and tried to add them twice. Hence the ad-hoc fix to unconditionally lower-case the names. I'm not sure if current winbind on RHEL-6 still acts in the same way or if a recent version of SSSD on an IPA client would still have an issue if a RHEL-6 IPA server would still return the name of the same user sometimes all lower-case and other times in the original spelling with maybe some upper-case characters. I hope that using a RHEL-8 IPA client with a RHEL-6 IPA server will be as rare as a proton decay, but who knows. bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5251#issuecomment-685327536 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
[SSSD] [sssd PR#5251][comment] [wip] subdomains: allow to inherit case_sensitive=Preserving
URL: https://github.com/SSSD/sssd/pull/5251 Title: #5251: [wip] subdomains: allow to inherit case_sensitive=Preserving pbrezina commented: """ RHEL-6 servers should not be affected since it requires changes on both client and server side SSSD. So RHEL-6 servers will just reply with lowercased names (since the client will not be updated there) and that's what the client will use. Thanks for the clarification, I'll see what we can do about it. """ See the full comment at https://github.com/SSSD/sssd/pull/5251#issuecomment-684802542 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
[SSSD] [sssd PR#5251][comment] [wip] subdomains: allow to inherit case_sensitive=Preserving
URL: https://github.com/SSSD/sssd/pull/5251 Title: #5251: [wip] subdomains: allow to inherit case_sensitive=Preserving sumit-bose commented: """ Hi, about the winbind comments, they are coming from a time where the extdom plugin on the IPA servers was using winbind for the SID-to-name (and reverse) lookups. This was changed 7 years ago, see https://pagure.io/freeipa/issue/3637 for details. However, IPA servers on RHEL6 might still be affected. Would it be possible to check in `s2n_response_to_attrs()` is `Preserving` is requested and keep the lower-case version if not? Since this feature requires that `Preserving` is set on the server side as well this more or less implies that it cannot be used wiht very old versions of IPA. Do you think it would be worth to ask IPA team if they can add a ipa-config option to switch `Preserving` on to make the configuration more easy and consistent? bye, Sumit """ See the full comment at https://github.com/SSSD/sssd/pull/5251#issuecomment-684758361 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
[SSSD] [sssd PR#5251][comment] [wip] subdomains: allow to inherit case_sensitive=Preserving
URL: https://github.com/SSSD/sssd/pull/5251 Title: #5251: [wip] subdomains: allow to inherit case_sensitive=Preserving pbrezina commented: """ @sumit-bose bump """ See the full comment at https://github.com/SSSD/sssd/pull/5251#issuecomment-678202940 ___ sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
