0

I'm trying to figure out how to change my realm login format to allow for lowercase but currently it just seems to work with uppercase?

realm list
domain
  type: kerberos
  realm-name: domain
  domain-name: domain
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: oddjob
  required-package: oddjob-mkhomedir
  required-package: sssd
  required-package: adcli
  required-package: samba-common-tools
  login-formats: %U
  login-policy: allow-permitted-logins

I would like to utilize login format %u instead?

  • 1
    The very long standing convention is to use uppercase realm name to distinguish the Kerberos realm from the DNS domain. And Kerberos realm names are case sensitive. A lot of existing software expects the realm name to be uppercase (even though it shouldn't). You may very well break stuff by doing this. – Michael Hampton Aug 19 at 19:32
  • Yeah I think you're right about that. It looks like there was a local user account in the passwd file for the user as well and something was causing a conflict. Removing that allowed login from any combination of case without issue. – Andrew Aug 19 at 20:08
0

It looks like there was a matching local user account in the passwd file for the user that was causing a conflict. Removing that allowed login from any combination of case without issue.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.