binding user account with email

[scarlett2018]

Currently, user account can not contain "-" and "@", user does not have email address info.

To maintain users email, I have to maintain a table to keep the alias. And some users who start with "v-" cannot have the same user account as their alias.

[fanyangCS]

@yqwang-ms , can we allow "-" and "@" in the user name?

[yqwang-ms]

 @ is not allowed, because it is reserved in URI, see https://tools.ietf.org/html/rfc3986#section-2.3
 - is already allowed in YARN Launcher. 
 (For K8S Launcher it is not allowed, because it is already used to sperator in PodName, etc)

[yqwang-ms]

For what we allowed, please check:
https://github.com/Microsoft/pai/blob/master/subprojects/frameworklauncher/yarn/doc/USERMANUAL.md#assumption

[fanyangCS]

can we rewrite "@" in the user name to "#"when using it in a uri way?
For k8s launcher, can you change "-" to something else as a separator?

Or maybe we should differentiate "user id" from "user name": the current user name should actually be user id. and we can introduce another field called "user alias" or "email".

[yqwang-ms]

But # is also not allowed in URI, URI only allows below, may be we need another one.
ALPHA / DIGIT / "-" / "." / "_" / "~"

For k8s launcher, I keep align with Statefulset who uses -, it is more complex thing we can disscus later given k8s has more strong naming convention on object name, label name, env name.

[Gerhut]

If it just an URI issue, we could encode them.

[yqwang-ms]

Agree 👍

[fanyangCS]

@Gerhut and @yqwang-ms , with the support of AAD, we should be able to support "-" or "." in user name. This is a must-have now.

[yqwang-ms]

"-" or "." is already allowed in YARN Launcher.
https://github.com/Microsoft/pai/blob/master/subprojects/frameworklauncher/yarn/doc/USERMANUAL.md#assumption

[scarlett2018]

"-" or "." is already allowed in YARN Launcher.
https://github.com/Microsoft/pai/blob/master/subprojects/frameworklauncher/yarn/doc/USERMANUAL.md#assumption

@yqwang-ms - what else is needed besides YARN Launcher supports?

[yqwang-ms]

I am not sure, @Gerhut may know the details.

[fanyangCS]

rest server has some constraint. @Gerhut and @wangcan0329 have more information.

[scarlett2018]

cc @xiaowuhu for reference.

[sterowang]

It seemed the full email address as user name should be supported when we enable Open ID login. From here https://en.wikipedia.org/wiki/Email_address#Local-part we can see a more versatile email address format, so I think our rules might need to be updated.

[scarlett2018]

It seemed the full email address as user name should be supported when we enable Open ID login. From here https://en.wikipedia.org/wiki/Email_address#Local-part we can see a more versatile email address format, so I think our rules might need to be updated.

Thanks @sterowang , seems need to mark this one as higher priority to unblock Open ID login.