`users` command shows `user user@domain` when logging in with a smartcard

[Khurrum Maqb]

If a user logs in to a Centos 7.6 system with ipa 4.6.4-10 using a Smartcard
(gdm-greeter), the output of the `users` command is

user user(a)dom.ain 

If a user logs in to the same system with a username and password, the output of the
`users` command is

user user 

Where could user(a)dom.ain be showing up from? it doesn't show up anywhere else as far
as I can tell. It's been a non-issue, but our Cisco AnyConnect VPN configs mandate
that only one user be logged in when connecting to VPN. When a user logs in with a
username and password, the VPN connects. But when a user logs in with a smartcard + pin,
anyConnect complains multiple users logged in and disconnects. 

I believe AnyConnect is looking at the output of `users` and is seeing `user user(a)dom.ain`
and treating that as two different users. 

Why does logging on with a smartcard on this system result in a user called user(a)dom.ain
and how can I change it so that either all of them are just called user, or all of them
are just called user(a)dom.ain. 

Thank you so much!

[Khurrum Maqb]

Some more information:

`who` returns
user(a)dom.ain :0 2019-7-25 (:0) 
user     pts/0  2019-7-25 (:0)

Logging in to just the terminal tty (using ctrl+alt+f2) logs me in as user with smartcard.
So somehow, using the smartcard login starts up the X display as user(a)dom.ain but all the
other processes are still running as user. 

Is this expected? Or any one know if this behavior can be changed?

[Khurrum Maqb]

So I have anyconnect working now. 

In sssd.conf I added:

[domain]
use_fully_qualified_names = True
full_name_format = %1$s@%2$s

and now all users in `who` are user@domain

However, setting it to the following does not change the behavior and gnome_session_binary
is still started as user@domain while all others are user: 

[domain]
use_fully_qualified_names = False
full_name_format = %1$s

I can make this work though! I'll troubleshoot a bit longer because I'd prefer
that everyone is just called 'user'

[Sumit Bose]

On Fri, Jul 26, 2019 at 03:08:14PM -0000, Khurrum Maqb via FreeIPA-users wrote:
>  So I have anyconnect working now. 
>  
>  In sssd.conf I added:
>  
>  [domain]
>  use_fully_qualified_names = True
>  full_name_format = %1$s@%2$s
>  
>  and now all users in `who` are user@domain
>  
>  However, setting it to the following does not change the behavior and
> gnome_session_binary is still started as user@domain while all others are user: 
>  
>  [domain]
>  use_fully_qualified_names = False
>  full_name_format = %1$s
>  
>  I can make this work though! I'll troubleshoot a bit longer because I'd prefer
> that everyone is just called 'user' 
HI,

I think the issue you are seeing is already tracked by
https://bugzilla.redhat.com/show_bug.cgi?id=1718156.

HTH

bye,
Sumit

> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/[e-mail]...