[ https://issues.jboss.org/browse/JBIDE-15847?page=com.atlassian.jira.plugi... ] Andre Dietisheim edited comment on JBIDE-15847 at 11/4/13 8:05 AM: ------------------------------------------------------------------- The reason for this to happen is a "rename" of the user in OSE due to using LPDAP/Kerberos. I create the connection using *<redhat-user>*. The user being stored in OSE is "renamed", "automcompleted". When querying OSE for the user of the domain I get *&lt;redhat-user(a)redhat.com&gt;*. According to Brenton Leanhardt this is due to a misconfigured backend. The user-rewrite happens because OSE is not configured using *KrbLocalUserMapping On* {quote} 01:43:53 PM) adietish: bleanhar: ok. in your appreciation, do you think that this is unique to our setup or may this happen for customers? (01:43:56 PM) bleanhar: it's sort of a mess to rename users so I'm betting they never added it after we learned about this (01:44:24 PM) bleanhar: adietish: it's sort of an edge case. I would _highly_ recommend customers use 'KrbLocalUserMapping On' in their environments (01:44:28 PM) bleanhar: it's now the default (01:44:33 PM) adietish: bleanhar: ok, gotcha, so if I read you right the user-renaming can be avoided via this config? (01:45:55 PM) bleanhar: adietish: correct, this problem can (and should be) avoided (01:45:59 PM) bleanhar: I'll follow up with IT {quote} was (Author: adietish): The reason for this to happen is a "rename" of the user in OSE due to using LPDAP/Kerberos. I create the connection using *<redhat-user>*. The user being stored in OSE is "renamed", "automcompleted". When querying OSE for the user of the domain I get *&lt;redhat-user(a)redhat.com&gt;*. According to Brenton Leanhardt this is due to a misconfigured backend. The user-rewrite happens because OSE is not configured using *KrbLocalUserMapping On* {quote} 01:43:53 PM) adietish: bleanhar: ok. in your appreciation, do you think that this is unique to our setup or may this happen for customers? (01:43:56 PM) bleanhar: it's sort of a mess to rename users so I'm betting they never added it after we learned about this (01:44:24 PM) bleanhar: adietish: it's sort of an edge case. I would _highly_ recommend customers use 'KrbLocalUserMapping On' in their environments (01:44:28 PM) bleanhar: it's now the default (01:44:33 PM) adietish: bleanhar: ok, gotcha, so if I read you right the user-renaming can be avoided via this config? (01:45:55 PM) bleanhar: adietish: correct, this problem can (and should be) avoided {quote} -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira