[1882] in Moira
RE: group, etc suffixes in AD
daemon@ATHENA.MIT.EDU (Paul B. Hill)
Sat Oct 13 12:38:39 2001
From: "Paul B. Hill" <pbh@MIT.EDU>
To: "Danilo Almeida" <dalmeida@mit.edu>
Cc: "Pismere-Team@Mit. Edu" <pismere-team@mit.edu>, <moiradev@mit.edu>
Date: Sat, 13 Oct 2001 12:38:38 -0400
Message-ID: <JDEEIOCIIGMKDNGJMBLJCENJCIAA.pbh@mit.edu>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
In-Reply-To: <07e201c1537f$75981e20$1b011212@mit.edu>
Hi,
I know that Dave Tanner and I spoke about an escape sequence to avoid a
"_group" collision. I'll let him post the details about the current
implementation.
AD should be tkaing care of the hostname truncation issue but we still need
to take a look at it and get it documented. I'm pretty sure that the
algorithm is supposed to be that once a machine has a simple 15 character
followed by a "$" SAM hostname, the next machine that would collide gets
passed through a very simple hashing method.
Microsoft is supposed to be using the same algorithm that was specified for
SMB. But I don't find a handy reference to what they do. We should make some
tests and document what we observe.
Paul
-----Original Message-----
From: Danilo Almeida [mailto:dalmeida@MIT.EDU]
Sent: Friday, October 12, 2001 8:39 PM
To: pismere-team@mit.edu
Cc: moiradev@mit.edu
Subject: Re: group, etc suffixes in AD
Further info:
> I noticed that the group suffix used in the SAM name for moira objects
> in AD is "_group". Isn't that going to cause a problem if a user in
> moira is called "a_group" or whatever? Shouldn't we be using a "."
> instead of a "_"?
To clarify, I'm talking about the sAMAccountName attribute.
> Also, it just occurred to me that we might have issues in AD if a machine
> name is the same as a user name... We need to figure that out.
Ok, a false alarm. It looks like the sAMAccountName attribute for computer
objects in AD has a trailing "$" (e.g., computername --> computername$).
However, they are also truncated to 15 characters before getting the
trailing "$". This ties into the long machine name issue we're
investigating.
- Danilo
