openSUSE Project Management Tool: Issueshttps://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842019-09-24T12:44:20ZopenSUSE Project Management Tool
Redmine invisAD-setup - action #57308 (Workable): Domain names are restricted to two partshttps://progress.opensuse.org/issues/573082019-09-24T12:44:20Zhgraeberherbert@graeber-clan.de
<p>Domain names in invis-server are restricted to exactly two components, for example "ad.loc".</p>
<p>The samba <a href="https://wiki.samba.org/index.php/Active_Directory_Naming_FAQ" class="external">wiki</a> suggests the use a subdomain of a public domain name for active directory. This will result in name like "ad.mysite.net" for the domain resp. "server.ad.mysite.de" for the server, where "mysite.net" is the public domain name.</p>
<p>This is not possible with invis-server. Sometimes the full name will be used, sometimes "ad.mysite" is used instead. For example, LDAP will use dc=ad,dc=mysite. With this some components of invis server do not work. Using the portal results in invalid LDAP credentials and other anomalies I have (e. g. dhcpd doesn't run), may be a consequence of this restriction, too.</p>
<p>A short term solution may be to check the domain name during setup, so that it contains exactly one ".". A long term solution will be to drop the restriction alltogether.</p>