I'm using Kerberos and Active Directory to authenticate machines to The Foreman. It works well, except, due to the environment, I'm force to use the machine's SAMaccountName attribute as the REMOTE_USER value. In Active directory, these values always end in a dollar sign, but this is currently an invalid character in the login name.