auto.schema.substitute.chars

This configuration parameter specifies the character that replaces any characters specified in auto.schema.unix.name.disallow.chars encountered in an Active Directory user or group name in the corresponding UNIX name.

The default setting in centrifydc.conf is the following:

auto.schema.substitute.chars: _ (underbar) 

Run the adflush command after you change the value to flush the cache.