Principal name does not contain fqdn

[GOLLSCHEWSKY, Tim]

Ø  sssd does not start as it sets the Principal name to [host/lx20(a)ADS.EXAMPLE.COM]

Ø  instead of [host/fqdn(a)ADS.EXAMPLE.COM], i.e. [host/lx20.example.com(a)ADS.EXAMPLE.COM].


Ø  Is there a way to set the principal name in a conf file ?


For SASL auth, you can set it via ldap_sasl_authid:


       ldap_sasl_authid (string)
           Specify the SASL authorization id to use. When GSSAPI is used, this represents
the
           Kerberos principal used for authentication to the directory.

           Default: host/machine.fqdn@REALM


Cheers,

Tim.

________________________________

This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related
entities "Suncorp".
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at
suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not
necessarily reflect the view of Suncorp. The content, including attachments, is a
confidential communication between Suncorp and the intended recipient. If you are not the
intended recipient, any use, interference with, disclosure or copying of this e-mail,
including attachments, is unauthorised and expressly prohibited. If you have received this
e-mail in error please contact the sender immediately and delete the e-mail and any
attachments from your system.

[Stefan Schmid]

Hi Tim

ldap_sasl_authid did the trick.
Thanks.

Cheers,
Stefan



Gesendet: Donnerstag, 03. Januar 2013 um 00:43 Uhr
Von: "GOLLSCHEWSKY, Tim" <Tim.GOLLSCHEWSKY(a)suncorp.com.au&gt;
An: "[e-mail]"
<sssd-users(a)lists.fedorahosted.org&gt;
Betreff: Re: [SSSD-users] Principal name does not contain fqdn

Ø  sssd does not start as it sets the Principal name to [host/lx20(a)ADS.EXAMPLE.COM]

Ø  instead of [host/fqdn(a)ADS.EXAMPLE.COM], i.e. [host/lx20.example.com(a)ADS.EXAMPLE.COM].
 

Ø  Is there a way to set the principal name in a conf file ?

 
 
For SASL auth, you can set it via ldap_sasl_authid:
 
 
       ldap_sasl_authid (string)
           Specify the SASL authorization id to use. When GSSAPI is used, this represents
the
           Kerberos principal used for authentication to the directory.
 
           Default: host/machine.fqdn@REALM
 
 

Cheers,
 
Tim.
------------------------------------------------------------
This e-mail is sent by Suncorp Group Limited ABN 66 145 290 124 or one of its related
entities "Suncorp".
Suncorp may be contacted at Level 18, 36 Wickham Terrace, Brisbane or on 13 11 55 or at
suncorp.com.au.
The content of this e-mail is the view of the sender or stated author and does not
necessarily reflect the view of Suncorp. The content, including attachments, is a
confidential communication between Suncorp and the intended recipient. If you are not the
intended recipient, any use, interference with, disclosure or copying of this e-mail,
including attachments, is unauthorised and expressly prohibited. If you have received this
e-mail in error please contact the sender immediately and delete the e-mail and any
attachments from your system.