Hi John,
Thanks for pointing me to case_sensitive, that indeed is the cause: the default for "case_sensitive" is "True", but for the AD provider "True" is invalid(??), so it defaults to "False"(???)!
Good news is that with both "case_sensitive = False" and "case_sensitive = Preserving" the results from AD and cache are identical (lowercase and case-preserving, respectively).
Since this (opposite defaults) is broken by design, I hope the AD provider will be fixed so it follows the general default.
Thanks,
Robbert
On 20-01-17 10:58, John Hodrien wrote:
On Fri, 20 Jan 2017, Robbert Eggermont wrote:
When sssd-ad is working normally, group names returned are all lowercase. However, when the AD backend goes offline, group names returned from the SSSD cache contain capitals.
case_sensitive = Preserving
This way you get capitalisation on what's reported when it's connected and not