I can't see much sense in this, the (private) BZ talks about PAM authentication with "DOMAIN+user", which Foreman doesn't directly have. It supports LDAP directly to AD so there's no need to support "+" in the username.

Dominic Cleal wrote:

I can't see much sense in this, the (private) BZ talks about PAM authentication with "DOMAIN+user", which Foreman doesn't directly have. It supports LDAP directly to AD so there's no need to support "+" in the username.

Is there an issue with supporting it? I bet with SSSD we can get to pam. I hear htis alot where folks want to use the email+foo for testing. I realize that usernames do not need ot be emails.. but I could see folks wanting this.