Is this for AD provider or IPA provider?
(In reply to Pavel Březina from comment #2) > Is this for AD provider or IPA provider? id_provider = ad access_provider = ad
Upstream ticket: https://github.com/SSSD/sssd/issues/5250
Upstream PR: https://github.com/SSSD/sssd/pull/5251
Pushed PR: https://github.com/SSSD/sssd/pull/5251 * `master` * 944c47e27c4e5a01816bb897efb33c1825a64078 - man: update case_sensitive documentation to reflect changes for subdomains * f6bb31af5b5c6605f33377f0750c85d0ff722385 - subdomains: allow to inherit case_sensitive=Preserving for IPA * f2655950430a25abc6b74761b2872004e3258893 - subdomains: allow to set case_sensitive=Preserving in subdomain section * 12eb04b2fd698245d653c9166af29949d337b3be - subdomains: allow to inherit case_sensitive=Preserving * 0eb0281c9620086cda0e814532398e5a9a4b7092 - man: add auto_private_groups to subdomain_inherit
Tested against sssd-2.5.0-1.el8.x86_64 #### sssd.conf ##### [sssd] domains = domain.com config_file_version = 2 services = nss, pam [domain/domain.com] ad_domain = domain.com krb5_realm = DOMAIN.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%u@%d access_provider = ad subdomain_inherit = case_sensitive case_sensitive = Preserving | False #### case_sensitive = False ##### [root@ci-vm-10-0-99-216 sssd]# id UpperUser uid=933601115(upperuser) gid=933600513(domain users) groups=933600513(domain users) [root@ci-vm-10-0-99-216 sssd]# id Upper_Child.com uid=132201107(upper_child.com) gid=132201107(upper_child.com) groups=132201107(upper_child.com),132200513(domain users.com) #### case_sensitive = Preserving ##### [root@ci-vm-10-0-99-216 sssd]# id UpperUser uid=933601115(UpperUser) gid=933600513(Domain Users) groups=933600513(Domain Users) [root@ci-vm-10-0-99-216 sssd]# id Upper_Child.com uid=132201107(Upper_Child.com) gid=132201107(Upper_Child.com) groups=132201107(Upper_Child.com),132200513(Domain Users.com)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4435