Bug 983575

Summary: Disallow or warn if full_name_format is set to a non-default value when IPA server mode is on
Product: Red Hat Enterprise Linux 7 Reporter: Dmitri Pal <dpal>
Component: doc-System_Level_Authentication_GuideAssignee: Aneta Šteflová Petrová <apetrova>
Status: CLOSED CURRENTRELEASE QA Contact: Kaushik Banerjee <kbanerje>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: apetrova, grajaiya, jgalipea, pbrezina, sgoveas, tcapek
Target Milestone: rcKeywords: Documentation
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-10 12:07:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Dmitri Pal 2013-07-11 13:48:00 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/2009

If the IPA server mode is on and the SSSD is running on the IPA server, then the server's extdom plugin calls getpwnam_r to read info about trusted users from the AD server and return them to the clients that called the extended operation.

The SSSD returns the subdomain users fully-qualified, ie "user@domain" by default. The format of the fully qualified name is configurable.

However, the extdom plugin returns the user name without the domain component.

We have a couple of options:
 * when ipa_server_mode is on, return the usernames non-qualified.
 * when ipa_server_mode is on, warn if the full_name_format is set to a non-default value. That would prompt the admin to change the format if he changed it to something exotic.

I think the second option sounds better.
Comment 4 Aneta Šteflová Petrová 2015-02-16 13:40:24 UTC 
I corrected the typo that Steeve found during the QA review.
Comment 6 Steeve Goveas 2015-02-16 15:12:01 UTC 
Document verified