Changing login-formats for Linux and Active Directory

Question

On CentOS, I run realm list and see login-formats: %[email protected]

I'd like to change login-formats: %[email protected] to login-formats: %U

How would I go about doing this? I'm assuming there is a .conf file, I've checked sssd.conf and krb5.conf and even checked man on those files.

What I'm trying to do is allow an active directory user to login to the linux box using username@host instead of username@domain@host. Currently username@domain@host works fine but not username@host.

Any help is greatly appreciated.

See also: http://serverfault.com/questions/648515/sssd-authentication-to-windows-domain-without-domain-com-everywhere — Hugo Ideler, Jun 23 '16 at 11:49

score 9 · Answer 1 · answered Aug 13 '15 at 19:46

9

This was kind of confusing to figure out for me because there was no reference to the term login-formats anywhere in any documentation.

In /etc/sssd/sssd.conf

add a line in the domain section to include this:

    [domain/contoso.com]
    ...
    use_fully_qualified_names = False
    ...

then restart sssd.

answered Aug 13 '15 at 19:46

witchbutter

91
1
2

1

Good call - this works perfectly. Format is now simply %U which works great with pam_mount – phil-lavin Sep 08 '15 at 11:35

score 1 · Answer 2 · edited Aug 29 '19 at 08:52

1

i did this and working as expected as like login-formats: %U

sudo sed -i -e 's/use_fully_qualified_names = True/use_fully_qualified_names = False/g' /etc/sssd/sssd.conf

sudo systemctl restart sssd.service

sudo systemctl status sssd.service

edited Aug 29 '19 at 08:52

Dennis Nolte

2,881
4
27
37

answered Aug 28 '19 at 15:36

Namasivayam

11
1

Changing login-formats for Linux and Active Directory

2 Answers2