Is it possible to make all QAS users have lowercase NSS names?
By default QAS will use the case as set in users Active Directory username. You can enable lowercase name conversion by running the command
# /opt/quest/bin/vastool configure vas nss_vas lowercase-names true
This option can also be set using Group Policy/VGP (Computer Configuration | Unix Settings | Quest Authentication Services | Client Configuration | QAS Configuration | lowercase-names | Set to true)
This option will make all QAS users have a lowercase name on NSS lookups. For example:-
# id username
uid=1006(uSeRnAmE) gid=1000(ux admin) groups=1000(ux admin)
# /opt/quest/bin/vastool configure vas nss_vas lowercase-names true
# /opt/quest/bin/vastool flush
# id username
uid=1006(username) gid=1000(ux admin) groups=1000(ux admin)
From man vas.conf
lowercase-names = <true | false>
Default value: false
Some deployments in Active Directory will have usernames all uppercase. pam_vas does support case insensitive login names like Windows does, but the user and group information
available from the getpw* and getgr* function families will still match what is configured in Active Directory. Some Unix platforms expect all user and group names to be lowercase.
Setting this option to true will guarantee that the pw_name and gr_name fields in the passwd and group structs (returned by the getpw* and getgr* functions) are lowercase.
The following example shows how to lowercase all user and group names returned by nss_vas explicitly.
[nss_vas]
lowercase-names = true
© ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center