Re: Case sensitivity of user/group names (was Re: DBIS commentary)
Jordan Brown <[email protected]> Thu, 3 Dec 2015 15:02:05 -0800
| Newsgroups | gmane.ietf.ldapext |
|---|---|
| Message-ID | <[email protected]> |
On 12/3/2015 2:45 PM, Charlie wrote: > Well, in a cleanly integrated environment, I'd expect to see most > users' Microsoft SamAccountName and POSIX uid be identical lower-cased > strings less than 20 characters long. I believe all currently > shipping LDAP directory implementations support the necessary schema. > Certainly AD and OpenLDAP both do. > > SamAccountName should be case-insensitive, uid should be > case-sensitive. If sAMAccountName and uid are identical, and sAMAccountName is case-insensitive, doesn't that mean that you can't have two users whose 'uid' differs only in case? It would seem that the only visible effect of such a configuration is that an attempt to look up a wrong-case name on UNIX would fail, which is compatible in some sense but doesn't seem to really add any value over case-insensitivity.