Bug 983575 - Disallow or warn if full_name_format is set to a non-default value when IPA server mode is on
Summary: Disallow or warn if full_name_format is set to a non-default value when IPA s...
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: doc-System_Level_Authentication_Guide
Version: 7.0
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: ---
Assignee: Aneta Šteflová Petrová
QA Contact: Kaushik Banerjee
Depends On:
TreeView+ depends on / blocked
Reported: 2013-07-11 13:48 UTC by Dmitri Pal
Modified: 2019-03-06 02:16 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2015-03-10 12:07:11 UTC
Target Upstream Version:

Attachments (Terms of Use)

Description Dmitri Pal 2013-07-11 13:48:00 UTC
This bug is created as a clone of upstream ticket:

If the IPA server mode is on and the SSSD is running on the IPA server, then the server's extdom plugin calls getpwnam_r to read info about trusted users from the AD server and return them to the clients that called the extended operation.

The SSSD returns the subdomain users fully-qualified, ie "user@domain" by default. The format of the fully qualified name is configurable.

However, the extdom plugin returns the user name without the domain component.

We have a couple of options:
 * when ipa_server_mode is on, return the usernames non-qualified.
 * when ipa_server_mode is on, warn if the full_name_format is set to a non-default value. That would prompt the admin to change the format if he changed it to something exotic.

I think the second option sounds better.

Comment 4 Aneta Šteflová Petrová 2015-02-16 13:40:24 UTC
I corrected the typo that Steeve found during the QA review.

Comment 6 Steeve Goveas 2015-02-16 15:12:01 UTC
Document verified

Note You need to log in before you can comment on or make changes to this bug.