On 04/10/2013 11:12 AM, Stephen Gallagher wrote:
>
>
> You can change the domain delimiter in SSSD with the
> re_expression option in the [sssd] section. By default it assumes
> "user@DOMAIN", but you can swap it out for something else. See the
> sssd.conf(5) manpage and search on 're_expression'.
Okay, I think I still have the problem, in that the delimiter in both
instances is the '@' sign. Even when I manually specify the domain
portion (e.g., "re_expression = (?P<name>[^@]+)(a)AMERICAS.CPQCORP.NET")
it continues to flag [Cannot resolve servers for KDC in realm "HP.COM"]
in /var/log/secure. And although ldap_child.log references the correct
domain (via the keytab file), krb5_child.log continues to show
"Attempting kinit for realm [
HP.COM].
I'm probably either missing the point of your suggestion, Stephen, or
(just as likely) exposing my limited knowledge of regular expressions.
/Harry