Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-18360

[RFE] - set default_domain_suffix in sssd.conf

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • CLOSED
    • 900
    • Hide
      .Active Directory login with user name only

      Active Directory (AD) users can now log in to the web UI or use the `kinit` utility by entering only a user name without specifying a domain. You can set a default AD domain name by using the `foreman-ipa-sssd-default-realm` option in the `satellite-installer` utility.
      Show
      .Active Directory login with user name only Active Directory (AD) users can now log in to the web UI or use the `kinit` utility by entering only a user name without specifying a domain. You can set a default AD domain name by using the `foreman-ipa-sssd-default-realm` option in the `satellite-installer` utility.
    • Feature
    • Endeavour
    • Done

      Description of problem:

      Setting a default_domain_suffix for IDM based authentication would reduce an effort to type in the @domain while authenticating.

      Version-Release number of selected component (if applicable):
      Satellite 6.12

      How reproducible:

      Steps to Reproduce:
      1. Configure direct AD authentication or IPA authentication from https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11/html/administering_red_hat_satellite/configuring_external_authentication_admin#Configuring_Direct_AD_Integration_with_GSS_Proxy_admin
      2. Check the /etc/sssd/sssd.conf as no default domain suffix is configured
      3. Having this we can query user without a domain suffix.

      Actual results:
      An end-user would have to type the user@domain.com syntax to login to Satellite

      Expected results:
      We can reduce this effort by setting a default_domain_suffix to the current domain that the host is joined to.

      Additional info:

      Under [sssd] section adding default_domain_suffix = example.com to achieve this

              rhn-support-nshaik Nagoor Shaik
              rhn-support-nshaik Nagoor Shaik
              Pavel Novotny Pavel Novotny
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: