-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed 10 Apr 2013 01:04:03 PM EDT, Sutton, Harry (GSSE) wrote:
On 04/10/2013 11:12 AM, Stephen Gallagher wrote:
>>
>>
>> You can change the domain delimiter in SSSD with the
>> re_expression option in the [sssd] section. By default it
>> assumes "user@DOMAIN", but you can swap it out for something
>> else. See the sssd.conf(5) manpage and search on
>> 're_expression'.
>
Okay, I think I still have the problem, in that the delimiter in
both instances is the '@' sign. Even when I manually specify the
domain portion (e.g., "re_expression =
(?P<name>[^@]+)(a)AMERICAS.CPQCORP.NET") it continues to flag [Cannot
resolve servers for KDC in realm "HP.COM"] in /var/log/secure. And
although ldap_child.log references the correct domain (via the
keytab file), krb5_child.log continues to show "Attempting kinit
for realm [
HP.COM].
I'm probably either missing the point of your suggestion, Stephen,
or (just as likely) exposing my limited knowledge of regular
expressions.
Yes, the regular expression syntax is complex. I'm not certain I
understand all of the intricacies myself. I'm CCing Jakub Hrozek who
can probably help more.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlFlncYACgkQeiVVYja6o6P3GgCeIKwB2ItBX61Wt1pscYSEOxrQ
+psAoJXJe5mmKzysulzDZ6V1Ug0xZ/LW
=iNsL
-----END PGP SIGNATURE-----