The AuriStorFS Protection Service as of v2021.05-30 has the following naming limits:
- user name and group names cannot be longer than 63 characters
- user names cannot include either ':' (colon) or '\n' (newline)
- all names are folded to lowercase when stored into Protection Database and all lookups are case insensitive. The case conversions use the configured locale which on afsdb1.desy.de is
- LANG=en_US.UTF-8
- LC_CTYPE="en_US.UTF-8"
- a user or group name is permitted to be base-10 numeric but any numeric name must be identical to the assigned ID value. (This began to be enforced by v2021.05-30.)
- the group name size limit of 63 characters has implications for the creation of self owned groups. If the length of the user name is L(name) then the maximum self owned group name is 63 - L(name) - 1 since the self owned group name must include both the user name and a colon. A user entry whose name is 62 or 63 characters in length will be unable to create self managed groups.
- cross realm protection entites require a "system:anyuser@<realm>" group entry. As a result the longest realm for which cross-realm entries can be created is 48 characters. If a realm is 48 characters long, then the user names in that realm cannot exceed 14 characters. maxL(name) = 63 - L(realm) - 1. L(name) + L(realm) + 1 >= 62 characters then the user will be unable to create self managed groups.