Hi,
this patch add support to use short/flat/NetBIOS domain names in a fully qualifies user name. This becomes important when you want to use samba in a setup with trusted domains.
Samba isn't very flexible here and looks for user names like SHORTDOMNAME\username (only the delimiter '' can be changed). If sssd is configured with a regular expression like
(?P<domain>[^\]*?)\?(?P<name>[^\]+$)
to match samba's expectation currently only the DNS domain names are compared with the requested domains and not the flat names.
bye, Sumit
On Mon, Sep 03, 2012 at 02:04:16PM +0200, Sumit Bose wrote:
Hi,
this patch add support to use short/flat/NetBIOS domain names in a fully qualifies user name. This becomes important when you want to use samba in a setup with trusted domains.
Samba isn't very flexible here and looks for user names like SHORTDOMNAME\username (only the delimiter '' can be changed). If sssd is configured with a regular expression like
(?P<domain>[^\]*?)\?(?P<name>[^\]+$)
to match samba's expectation currently only the DNS domain names are compared with the requested domains and not the flat names.
bye, Sumit
Ack
On Mon, Sep 03, 2012 at 04:31:55PM +0200, Jakub Hrozek wrote:
On Mon, Sep 03, 2012 at 02:04:16PM +0200, Sumit Bose wrote:
Hi,
this patch add support to use short/flat/NetBIOS domain names in a fully qualifies user name. This becomes important when you want to use samba in a setup with trusted domains.
Samba isn't very flexible here and looks for user names like SHORTDOMNAME\username (only the delimiter '' can be changed). If sssd is configured with a regular expression like
(?P<domain>[^\]*?)\?(?P<name>[^\]+$)
to match samba's expectation currently only the DNS domain names are compared with the requested domains and not the flat names.
bye, Sumit
Ack
Pushed to master.
sssd-devel@lists.fedorahosted.org