Skip to content

Usernames with hyphen are rejected in sftpsubsys #263

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
jonasbardino opened this issue Jun 13, 2025 · 1 comment · May be fixed by #262
Open

Usernames with hyphen are rejected in sftpsubsys #263

jonasbardino opened this issue Jun 13, 2025 · 1 comment · May be fixed by #262
Assignees
@jonasbardino
Labels
bug Something isn't working
Milestone
Python3 support f...

Comments

@jonasbardino
Copy link
Contributor

As mentioned in the comments to PR #233 existing users with hyphen (-) in their usernames are incorrectly rejected in PAM before even reaching authentication:

Jun 12 09:45:51 sftp-erda pam_mig[73585]: Invalid username: [email protected]
Jun 12 09:45:51 sftp-erda sshd[73585]: Invalid user [email protected] from REDACTED port 40024

We need to allow hyphen in the regex pattern in PAM and NSS and a regression in that PR apparently broke that.
@jonasbardino jonasbardino self-assigned this Jun 13, 2025
@jonasbardino jonasbardino added the bug Something isn't working label Jun 13, 2025
@jonasbardino jonasbardino linked a pull request Jun 13, 2025 that will close this issue
Fix regression from PR233 to allow hyphen in sftpsubsys usernames again #262
Open
@jonasbardino
Copy link
Contributor Author

jonasbardino commented Jun 13, 2025 •
edited
Loading

An affected user confirmed the patch to fix the issue in production. Please refer to internal support ticket 34499 for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jonasbardino jonasbardino

Labels
bug Something isn't working
Projects
None yet
Milestone
Python3 support for general research ...
Development

Successfully merging a pull request may close this issue.

Fix regression from PR233 to allow hyphen in sftpsubsys usernames again ucphhpc/migrid-sync
1 participant
@jonasbardino