SCIENTIFIC-LINUX-USERS Archives

March 2013

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
AD Integration - what do you do about user/group pairs like puppet/puppet ?
From:
"James M. Pulver" <[log in to unmask]>
Reply To:
James M. Pulver
Date:
Wed, 27 Mar 2013 19:56:21 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (7 lines) 
So we're working along our SL6 and AD Server 2008R2 integration, using SSSD for authentication and such. We've realized that AD won't allow groups and users to have the same name. For common software like puppet and quemu that has this setup, what do you do? Change the program configuration to use a different group name? Do some hackery with OUs and sAMAccountNames and have it use gids (do the right things do this)? Technet says sAMAccountName must be unique and cannot be munged... 

--
James Pulver
LEPP Computer Group
Cornell University

ATOM RSS1 RSS2