Re: Case sensitivity of user/group names (was Re: DBIS commentary)

Jordan Brown <[email protected]> Thu, 3 Dec 2015 15:02:05 -0800
Newsgroups gmane.ietf.ldapext
Message-ID <[email protected]>
On 12/3/2015 2:45 PM, Charlie wrote:
> Well, in a cleanly integrated environment, I'd expect to see most
> users' Microsoft SamAccountName and POSIX uid be identical lower-cased
> strings less than 20 characters long.  I believe all currently
> shipping LDAP directory implementations support the necessary schema.
> Certainly AD and OpenLDAP both do.
>
> SamAccountName should be case-insensitive, uid should be
> case-sensitive.

If sAMAccountName and uid are identical, and sAMAccountName is case-insensitive, 
doesn't that mean that you can't have two users whose 'uid' differs only in case?

It would seem that the only visible effect of such a configuration is that an 
attempt to look up a wrong-case name on UNIX would fail, which is compatible in 
some sense but doesn't seem to really add any value over case-insensitivity.