Show Table of Contents
2.2. Enabling User Login Normalization
You can enforce normalization for user logins by enabling a selection of default or custom methods on the broker. This is helpful when using authentication methods like LDAP or Kerberos that can be case-sensitive or use a domain in the login. Without normalization, logins with different letter cases or domain suffixes are stored by the broker as distinct user accounts.
For example, when normalization is enabled using the
lowercase method, a user logging in as JDoe is authenticated using the configured authentication method, then the login is normalized as jdoe by the broker to access the jdoe user account on OpenShift Enterprise. When normalization is not enabled, a user logging in as JDoe is authenticated using the configured authentication method and accesses the JDoe user account on OpenShift Enterprise, while a user logging in as jdoe ultimately accesses a separate jdoe user account.
Warning
Existing logins are not automatically updated when normalization settings are changed. As a result, it is possible for existing user accounts to no longer be accessible if the login was not previously normalized.
The following default methods are available:
Table 2.1. Available Default User Login Normalization Methods
| Method | Function |
|---|---|
strip | Removes any additional spaces on either side of the login. |
lowercase | Changes all characters to lowercase. For example: JDoe --> jdoe |
remove_domain | Removes a domain suffix. For example: jdoe@example.com --> jdoe |
To enable normalization, edit the
/etc/openshift/broker.conf file on the broker host and provide one or more methods in the NORMALIZE_USERNAME_METHOD parameter using a comma-separated list:
Example 2.1. Setting User Login Normalization Methods
NORMALIZE_USERNAME_METHOD="lowercase,remove_domain"
Restart the broker service for any changes to take effect:
service openshift-broker restart
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.