while fixing the inconsistency described in
where the CIFS class was creating kerberos users as
and the web filter class was creting users as
we decided to remove the inconsistency by storing then always as 'user1'
(if do not use the REALM part).
There are situations (like having several domains in a trust) where it is necessary to have the REALM appended to the sAMAccountName just as the userPrincipalName.
Could we make the choice of the username format a configurable option?
In the same way that we do for ldap sync where the paramter
can be any directory attribute like: