[SSSD-users]Re: UTF8 character in LDAP

[Francis Augusto Medeiros-Logeay]

Ah, thanks Alexander - good to know.

Best,

Francis

---
Francis Augusto Medeiros-Logeay
Oslo, Norway

On 2025-03-03 09:46, Alexander Bokovoy via sssd-users wrote:
> On Пан, 03 сак 2025, Francis Augusto Medeiros-Logeay via sssd-users 
> wrote:
> > Never mind. Just realized that it was our gecos value that was
> > truncated. Using `ldap_user_gecos = cn` fixed it.
>
> RFC22307 defines gecos field as IA5String. IA5String is basically 128
> characters of ASCII. So you cannot use UTF-8 with gecos field in LDAP.
>
> The only reasonable way is to remap gecos in SSSD like you did with
> `ldap_user_gecos = cn`.
> > > On 3 Mar 2025, at 09:31, Francis Augusto Medeiros-Logeay via 
> > > sssd-users  wrote:
> > >
> > > Hi,
> > >
> > > I don’t know if this is an sssd bug or not:
> > >
> > > On a RHEL 9 machine, a local user with “ø”, “å” or “æ” in their Full 
> > > Name gets their name displayed fine on the login window on gnome.
> > >
> > > However, users with those characters in their full name that are 
> > > fetched from LDAP get those characters truncated when displaying on 
> > > the Lock Screen/login window.
> > >
> > > Sending a screenshot. The third user should be “Røys”.
> > >
> > > I tested it with other users, and it seems that this happens with 
> > > base64-encoded UTF8 strings fetched from LDAP.
> > >
> > > Is is an SSSD issue? Is there a fix?
> > >
> > > Best,
> > >
> > > Francis <Screenshot 2025-03-03 at 09.08.01.png>--
> > > _______________________________________________
> > > sssd-users mailing list -- [e-mail]
> > > To unsubscribe send an email to 
> > > [e-mail]
> > > Fedora Code of Conduct: 
> > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: 
> > > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives: 
> > > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > > Do not reply to spam, report it: 
> > > https://pagure.io/fedora-infrastructure/new_issue
> >
> > -- _______________________________________________
> > sssd-users mailing list -- [e-mail]
> > To unsubscribe send an email to 
> > [e-mail]
> > Fedora Code of Conduct: 
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: 
> > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > Do not reply to spam, report it: 
> > https://pagure.io/fedora-infrastructure/new_issue
>
> --
> / Alexander Bokovoy
> Sr. Principal Software Engineer
> Security / Identity Management Engineering
> Red Hat Limited, Finland