-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed 10 Apr 2013 01:04:03 PM EDT, Sutton, Harry (GSSE) wrote:
> On 04/10/2013 11:12 AM, Stephen Gallagher wrote:
>>> 
>>> 
>>> You can change the domain delimiter in SSSD with the 
>>> re_expression option in the [sssd] section. By default it
>>> assumes "user@DOMAIN", but you can swap it out for something
>>> else. See the sssd.conf(5) manpage and search on
>>> 're_expression'.
>> 
> 
> Okay, I think I still have the problem, in that the delimiter in
> both instances is the '@' sign. Even when I manually specify the
> domain portion (e.g., "re_expression =
> (?P<name>[^@]+)@AMERICAS.CPQCORP.NET") it continues to flag [Cannot
> resolve servers for KDC in realm "HP.COM"] in /var/log/secure. And
> although ldap_child.log references the correct domain (via the
> keytab file), krb5_child.log continues to show "Attempting kinit
> for realm [HP.COM].
> 
> I'm probably either missing the point of your suggestion, Stephen,
> or (just as likely) exposing my limited knowledge of regular
> expressions.
> 


Yes, the regular expression syntax is complex. I'm not certain I
understand all of the intricacies myself. I'm CCing Jakub Hrozek who
can probably help more.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFlncYACgkQeiVVYja6o6P3GgCeIKwB2ItBX61Wt1pscYSEOxrQ
+psAoJXJe5mmKzysulzDZ6V1Ug0xZ/LW
=iNsL
-----END PGP SIGNATURE-----
_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users

Reply via email to