diff options
| author | Sumit Bose <sbose@redhat.com> | 2015-09-01 13:30:19 +0200 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2015-09-14 15:52:40 +0200 |
| commit | 560b624b34895df55bf489a1d53380c6c8c82e03 (patch) | |
| tree | 641d55723ae81424713d2075706fda8fc3e10d4a /src/tests/python-test.py | |
| parent | 447d32b6f572e8ba3100668cb8677c19c0085be6 (diff) | |
| download | sssd-560b624b34895df55bf489a1d53380c6c8c82e03.tar.gz sssd-560b624b34895df55bf489a1d53380c6c8c82e03.tar.xz sssd-560b624b34895df55bf489a1d53380c6c8c82e03.zip | |
GPO: use SDAP_SASL_AUTHID as samAccountName
The samAccountName for AD hosts is the hosts NetBIOS name with a
trailing $. Since there is a size limit on NetBIOS names long DNS names
must be truncated to find a matching entry in the AD LDAP tree.
The NetBIOS name is already needed during kinit/SASL bind where the
SDAP_SASL_AUTHID config option is used. Since the GPO lookup code is
only reached after the SASL bind was successful we can safely assume
that the name is correct and use it for the GPO lookup.
Resolves https://fedorahosted.org/sssd/ticket/2692
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Diffstat (limited to 'src/tests/python-test.py')
0 files changed, 0 insertions, 0 deletions