@Tom-Elliott @george1421 My bad, I’m so sorry! It’s a keyboard layout issue! Man I feel like a newbie right now! But in mydefence, As you can tell by my bad english I’m a frenchy from Canada :)…

So this bring that next question, how can I change the keyboard layout in the pxe menu ? and Should I start a new thread ?

I must admit I have a complexe password with non alphanumeric characters (Active Directory Policy), can this be this ?

I’ve browsed thru many old guides and wikis on how to customize the PXE menu but nothing very up-to-date seems available. I would like to remove as many options and questions as possible to streamline the registry of new computers. In fact I would only enable “Full host registration and image” option on the PXE menu and get rid of some question during that registration process by skiping them or autofill some of the answer. Any up-to-date guides available somewhere ? Thanks

Now there is a way to authenticate users with LDAP using attribute userPrincipalName filled with email address, I’m wondering if we can enable this authentication on PXE menu as well??

@george1421 so funny I knew it :)…I’m just wondering if it worth opening a new thread! I feel like it’s going to be much harder than the web interface!

But yes it’s working great for the GUI. Should I repport it somewhere else ?

@george1421 Thanks I would think the lenght of 40 is plenty as only tech will use this interface with their very special “admin” accounts.

@Tom-Elliott Thanks as your last string works like a charm!

So I’ve created 2 LDAP connections, one with userPrincipalName and the other with sAMAccountName so if users use any of them it will work !

Now…what about the PXE menu ? I guess it’s a different story ?

I might have spotted someting in the string I’m using…this is our fqdn : csdufer.qc.ca and I’m using this string :

‘/(?=^.{3,40}$)^[\w][\w0-9][._-]?[\w0-9][.-]?[\w0-9]*[.-]?[\w0-9][@]?[\w0-9][.]?[\w0-9]+$/i’,

should I use this instead ?

‘/(?=^.{3,40}$)^[\w][\w0-9][._-]?[\w0-9][.-]?[\w0-9]*[.-]?[\w0-9][@]?[\w0-9][.]?[\w0-9]*[.]?[\w0-9]+$/i’,

I did the change but the system still refuse to authenticate my email based username from userPrincipalName AD attibute. Is there any logs where I can follow what’s going on or maybe I can test the authentication ?

I tried comment/delete the uername format test without success.

I have found this post and I don’t know if this could be relevante :
https://forums.fogproject.org/post/109449

how can I make LDAP authentication working with userPrincipalName fill with email address ? I guess there must be some patern check in php that prevent the use of @ ?

thanks for your help !