How to lower case home dirs in sssd with AD as a backend?

[Spike White]

sssd experts,

With an AD backend, by default the AD provider sets case_sensitive ==
False.  This has the desired action of lower-casing user names.  (and group
names).  But not home directories.

How can we similarly lower case home directories?  Our AD admins have an
edict to camel-case their home directory and user name entries in AD.
(Apparently, some high-level manager wishes to see user names in camel
case.)

In our old commercial AD integration product, it had a setting:

lowercase-homedirs = true

and then it took whatever it found in AD and merely lower cased it.

To sort of work around this problem when doing a sssd migration, we have
set:

[nss]

override_homedirs = /home/%u



This works.  But effectively, this is throwing out whatever is in AD and
replacing it with /home/<lower case user name>

This only works because all our home dirs. are under /home.  What about
other companies that need to lower-case their home dirs., but they’re not
always under /home?  How would you lower-case home dirs. in sssd?

Spike

[Sumit Bose]

Am Tue, May 04, 2021 at 11:58:56AM -0500 schrieb Spike White:
>  sssd experts,
>  
>  With an AD backend, by default the AD provider sets case_sensitive ==
>  False.  This has the desired action of lower-casing user names.  (and group
>  names).  But not home directories.
>  
>  How can we similarly lower case home directories?  Our AD admins have an
>  edict to camel-case their home directory and user name entries in AD.
>  (Apparently, some high-level manager wishes to see user names in camel
>  case.)
>  
>  In our old commercial AD integration product, it had a setting:
>  
>  lowercase-homedirs = true
>  
>  and then it took whatever it found in AD and merely lower cased it.
>  
>  To sort of work around this problem when doing a sssd migration, we have
>  set:
>  
>  [nss]
>  
>  override_homedirs = /home/%u
>  
>  
>  
>  This works.  But effectively, this is throwing out whatever is in AD and
>  replacing it with /home/<lower case user name>
>  
>  This only works because all our home dirs. are under /home.  What about
>  other companies that need to lower-case their home dirs., but they’re not
>  always under /home?  How would you lower-case home dirs. in sssd? 
Hi,

you are right, currently SSSD uses the home directory string provided by
AD as is without modifications. I guess you are looking for something
like '%o' for override_homedirs which does not add the original value
but the lower-case version.

bye,
Sumit

>  
>  Spike 
>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Spike White]

Sumit,

Yes exactly.

   override_homedir = %o

would return the original  home directory retrieved from the identity
provider.  What would be nice is another % flag, which retrieves the
original home dir, but lower cases this original home dir.  for instance:

   override_homedir = %L

(%l is already in use.)

Or an equiv option for case_sensitive (which is for user and groups only).
  Say:

    case_sensitive_homedirs = {True|False|Preserving}

Spike

On Wed, May 5, 2021 at 12:35 AM Sumit Bose <sbose(a)redhat.com&gt; wrote:

>  Am Tue, May 04, 2021 at 11:58:56AM -0500 schrieb Spike White:
>  > sssd experts,
>  >
>  > With an AD backend, by default the AD provider sets case_sensitive ==
>  > False.  This has the desired action of lower-casing user names.  (and
>  group
>  > names).  But not home directories.
>  >
>  > How can we similarly lower case home directories?  Our AD admins have an
>  > edict to camel-case their home directory and user name entries in AD.
>  > (Apparently, some high-level manager wishes to see user names in camel
>  > case.)
>  >
>  > In our old commercial AD integration product, it had a setting:
>  >
>  > lowercase-homedirs = true
>  >
>  > and then it took whatever it found in AD and merely lower cased it.
>  >
>  > To sort of work around this problem when doing a sssd migration, we have
>  > set:
>  >
>  > [nss]
>  >
>  > override_homedirs = /home/%u
>  >
>  >
>  >
>  > This works.  But effectively, this is throwing out whatever is in AD and
>  > replacing it with /home/<lower case user name>
>  >
>  > This only works because all our home dirs. are under /home.  What about
>  > other companies that need to lower-case their home dirs., but they’re not
>  > always under /home?  How would you lower-case home dirs. in sssd?
>
>  Hi,
>
>  you are right, currently SSSD uses the home directory string provided by
>  AD as is without modifications. I guess you are looking for something
>  like '%o' for override_homedirs which does not add the original value
>  but the lower-case version.
>
>  bye,
>  Sumit
>
>  >
>  > Spike
>
>  > _______________________________________________
>  > sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  > To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  > Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  > List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  > Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>