Re: Case sensitivity of user/group names (was Re: DBIS commentary)
Charlie <[email protected]> Thu, 3 Dec 2015 17:45:20 -0500
| Newsgroups | gmane.ietf.ldapext |
|---|---|
| Message-ID | <CAJb3uA4n+9LMj2gMYg_CA-YLechhnxk4mDsRQ2am+zeu-Veq1w@mail.gmail.com> |
Well, in a cleanly integrated environment, I'd expect to see most users' Microsoft SamAccountName and POSIX uid be identical lower-cased strings less than 20 characters long. I believe all currently shipping LDAP directory implementations support the necessary schema. Certainly AD and OpenLDAP both do. SamAccountName should be case-insensitive, uid should be case-sensitive. If you use each one appropriately in the environment for which it is intended, you can let POSIX sysadmins and Windows sysadmins retain whatever preferences, whims or bigotries they treasure. End users will be able to use all their systems as the documentation directs them, and programmers will be able to rely on their man pages &etc. I just don't see any significant advantages to using a single naming attribute shared with other systems. Why bother? It's all pain, no gain. Keeping case-sensitive and case-insensitive versions of user identifiers is easier and gives better results. All software on the local node will perform as expected, and no OS documentation needs to be rewritten. --Charlie