Specify whether you want to allow users to be found by their common name (
By default, Centrify allows users to login using their Linux, UNIX, or Mac OS X profile name. In addition, Linux and Unix users can use their Active Directory
displayName or Active Directory
cn attribute (default value is disabled for Mac OS X users). Allowing users to log on using these additional attributes can require the agent to perform multiple searches to locate a user account in Active Directory. In environments with domain controllers under heavy load or with large user populations, searching Active Directory multiple times may negatively impact performance.
If you want to prevent the Centrify agent from attempting to access to user information by the common name, you can disable this policy.
This group policy modifies the
adclient.user.lookup.cn setting in the agent configuration file.