SSSD does not allow leading "@" characters in front of username on RHEL system.
Issue
- SSSD seems to ignore leading @ characters when looking up a username.
- If we update nsswitch.conf to remove sss from the passwd line this behavior goes away and this is a security breach.
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- sssd
- ipa
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.