Okta Advanced Server Access Fails to Update UID and GID for Dot-Separated Usernames

When attempting to update the UID and GID attributes for an Okta Advanced Server Access (ASA) managed user, the changes fail to apply on the Unix machine. This occurs because Okta Advanced Server Access creates an underscore-separated username for existing dot-separated Unix usernames, causing a conflict. Resolve this issue by updating the Unix username attribute in the Okta Admin Console to match the existing Unix properties.

level=error msg="usermod (to change unix name) failed" args="--login jane_doe --home /home/jane_doe jane.doe" err="exit status 9" newUserName=jane_doe oldUserName=jane.doe output="usermod: user 'jane_doe' already exists\n" level=error msg="osedit: goal failed" description="Changing local user 'jane.doe' based on user:'9eee50f5-2793-69b9-a63d-f6bdbdcc415d' to username: 'jane_doe' and gid: 1004" error="exit status 9" goal=user_change_unix_gid_and_name

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Advanced Server Access (ASA)
• Administration
• Service Users

If an existing username uses a dot-separated format on the Unix machine, Okta Advanced Server Access creates an equivalent username in an underscore-separated format with a new UID and GID. When updating the UID and GID in Okta to match the Unix machine, the change fails to update on the Unix machine due to the username format mismatch.

How are the Unix attributes updated in the Okta Admin Console?

Update the Unix username, UID, and GID properties in the Okta Admin Console to match the properties on the Unix machine by following these steps.

1. Navigate to Applications > ASA - Assignment in the Okta Admin Console.
2. Select the pencil icon for the affected user to edit their attributes.
3. Update the UnixUsername, unixUid, and unixGid properties to match the exact properties on the Unix machine.

Update the attributes directly in the Okta Advanced Server Access dashboard.

Alternatively, modify the user attributes directly within the Okta Advanced Server Access dashboard by following these steps.

1. Navigate to Projects > <Project name> > Users in the Okta Advanced Server Access dashboard.
2. Select the gear icon next to the user to edit their attributes.
3. Update the UnixUsername, unixUid, and unixGid properties to match the exact properties on the Unix machine.

Applying these changes allows Okta Advanced Server Access to manage the existing user ID on the Unix machine and preserve all properties, such as the UID, GID, and home directory.