Return
-
Title
Incorrect output on Solaris 10 using who am i -
Description
On Solaris 10, the "who am I" command incorrectly identifies the user in certain situations.
If the user is VAS-enabled and is longer than the default length in Solaris 10 which is 9 , and switches to another account (local or not), "who am I" does not report the original user, only the current effective user.
-
Cause
This is expected on Solaris 10
The username length can be seen from the output of the command:# getconf | grep LOGIN_NAME_MAXIf the Active Directory username logged into the system, is longer than the value of LOGIN_NAME_MAX, then some tools will produce incorrect output. In this case, the command "who am i" will report the effective user instead of the original user.Applications that call functions such as (_POSIX_)LOGIN_NAME_MAX in Solaris may get confused by the (longer) username and default to the currently working username, or they will SEGFAULT.This was not the case with Solaris 11 because that OS defaults to a length of 32 chars. -
Resolution
Use shorter Active Directory usernames or use the instructions on this article about local user mapping.https://support.oneidentity.com/safeguard-authentication-services/kb/39070