[OpenIndiana-discuss] idmap case sensitivity

[James Relph]

Hi Jim,

> I think we've hit this years ago in one SXCE installation, and just
> forced lowercase domain names with entries like this (there are many
> per-user definitions also, I am not sure if they are the real key to
> success):
> 
> add     winname:Guest at thumper   unixuser:nobody
> add     winuser:Administrator at thumper   unixuser:root
> add     wingroup:*@domain.ru       unixgroup:*
> add     winuser:*@domain.ru        unixuser:*
> add     "wingroup:Domain Users at domain.ru"  unixgroup:staff
> add     "wingroup:Domain Admins at domain.ru" unixgroup:sysadmin

Thanks, did try that, but whether we were using upper or lowercase domain names in the idmap listings, it was only matching against lower-case logins.  We've got both upper-case and lower-case specified in the krb5.conf file as well.

In the end I've used:

add -d winuser:username@*	unixuser:username

That works, but it's unidirectional, so not ideal.

 Best regards,

James.