'UserAttributeToDisplay' registry setting does not work on Windows 7

  • 7007844
  • 08-Feb-2011
  • 26-Apr-2012

Environment

SecureLogin 7.0.1
Windows 7 Enterprise

Situation

The 'UserAttributeToDisplay' registry setting does not work on Windows 7.

Resolution

Fixed in Novell Client 2 SP2 for Windows.

Additional Information

This feature works as expected on Windows XP. But it does not appear to have any effect in Windows 7. The problem has been duplicated using the "uid" attribute and the the "cn" attribute.

For example, on Windows 7, the login Credential Provider shows "cn=user1,ou=Users,o=NTS". On a similarly configured XP workstation, the login GINA displays "user1" as expected.

STEPS TO DUPLICATE:

1. Install and configure a working SecureLogin 7.0.1 server setup.
2. Install SecureLogin 7.0.1 client on Windows 7. Tested and found to be not working on 32-bit Windows 7 machine.
3. Add the UserAttribueToDisplay registry setting at: HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login\LDAPwith one of the following valid values: "fullName", "givenName", "sn", "cn", or "uid"
4. Ensure that the attribute specified has public read access, as detailed in KB 10096661.
5. Restart the Windows 7 workstation and observe the contents of the Username field in the Credential Provider

After following these steps, note that the Credential Provider username field shows the complete LDAP formatted FDN(e.g. "cn=user1,ou=Users,o=NTS"). The Credential Provider username field should show only the attribute specified (e.g. "user1").

This configuration works perfectly on Windows XP workstations.