I’m running sssd version 1.11 with
the AD backend in Ubuntu 14.04 LTS (1.11.5-1ubuntu3) to authenticate users from Active Directory running on Windows Server 2012 R2, and I’m trying to achieve logins with
the User Principal
Name for all users of
the domain. But
the UPN are always Enterprise Principal Names.
Let-me illustrate
the problem with my user account:
Domain: local.example.com
sAMAccountName: ferrao
UPN:
[email protected] (there’s no local in
the UPN)
I can successfully login with
the sAMAccountName atribute, which is fine, but I can’t login with
[email protected] which is my UPN.
The optimum solution for me is to allow logins from sAMAccountName and
the UPN (User Principal Name). If’s not possible,
the UPN should be
the right way instead of
the sAMAccountName.
Another annoyance is
the homedir pattern with those options in sssd.conf:
default_shell = /bin/bash
fallback_homedir = /home/%d/%u
What I would like to achieve is separated home directories from
the EPN. For example:
/home/example.com/user
/home/whatever.example.com/user
But with this pattern I can’t map
the way I would like to do. I’ve looked through man pages and was unable to find any answers for this issues.
Thanks,