Issue #2756: WinSync users who have First.Last casing creates users who can have their password set - freeipa

freeipa

#2756 WinSync users who have First.Last casing creates users who can have their password set

Closed: Fixed None Opened 11 years ago by jraquino.

Due to the normally lowercase enforcement of uids, FreeIPA can't properly set the password for a user who was imported via a WinSync agreement. The code tries to search for a lowercase user.name@EXAMPLE.COM and yields none resulting in:

ipa passwd First.Last
New Password:
Enter New Password again to verify:
Not Found

rcritten commented 11 years ago

After some investigation this is due to the krbPrincipalName attribute having mixed-case but we are searching on a lower-case value.

By convention we make uid all lower case so all krbPrincipalName we create are lower@UPPER. We need to modify ipa-winsync.c to create lower-case principals.