sshd: computer name's case must match?
Corinna Vinschen
corinna-cygwin@cygwin.com
Wed Feb 13 16:26:00 GMT 2019
On Feb 13 09:23, Bill Stewart wrote:
> On Wed, Feb 13, 2019 at 9:10 AM Corinna Vinschen
> <corinna-cygwin@cygwin.com> wrote:
>
> > This can't work correctly with OpenSSH. The decision to allow only
> > the correct case in OpenSSH was made back in 2010, because otherwise
> > we would need a lot of special rules in OpenSSH just for Cygwin.
> > Sorry, but that's how it is.
>
> Thanks for the explanation -- this is understandable.
>
> In that case, the former arrangement before the patch was preferable.
>
> That is: For DOMAIN+username or COMPUTERNAME+username, the part before
> the "+" must be UPPERCASE, but the username is not case-sensitive.
>
> IMO This is the simplest and most straightforward arrangement.
No, that was a bug. With case insenitive usernames, the pattern
matching in OpenSSH won't work and you create a potential security
problem.
Corinna
--
Corinna Vinschen
Cygwin Maintainer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://cygwin.com/pipermail/cygwin/attachments/20190213/0d35a47f/attachment.sig>
More information about the Cygwin
mailing list