#2016 [RFE] Option for modify ldap query
Closed: Invalid None Opened 10 years ago by msoysal.

If a user tries to login with his username (ex. jsmith)
or by getent command (getent passwd jsmith),
sssd creates a ldap query with "uid=username".

from sssd logs:
[sssd[be[default]]] [sdap_get_generic_ext_step] (0x0400): calling
ldap_search_ext with [(&(uid=jsmith)(objectclass=posixAccount))] ...

If it would be possible to change the uid to something configurable,
like "mail:" a user could use his email address to login.
Everything else Unix-username, uidnumber, gidnumber, homedir, gecos ....
should still be processed, like searching for a user entry with uid=<username>.

Just a modification how the user entry should be fetched from a ldap server.
Maybe with a conf option
lookup_username_attr mail
#default uid
With a second "domain section" a user could use his unix accountname and his email
to login.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.13 beta
rhbz: => todo

Fields changed

mark: => 0
priority: major => minor
sensitive: => 0

It's already possible to remap attributes and log in with UPNs, therefore I'm postponing this ticket.

milestone: SSSD 1.14 beta => SSSD Deferred

Login with mail and overriding attributes is already possible, therefore we should close this ticekt.

review: 0 => 1

Fields changed

resolution: => worksforme
status: new => closed

Metadata Update from @msoysal:
- Issue set to the milestone: SSSD Patches welcome

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3058

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata