Re: sshd: computer name's case must match?

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Feb 13 09:23, Bill Stewart wrote:
> On Wed, Feb 13, 2019 at 9:10 AM Corinna Vinschen
> <corinna-cygwin@cygwin.com> wrote:
> 
> > This can't work correctly with OpenSSH.  The decision to allow only
> > the correct case in OpenSSH was made back in 2010, because otherwise
> > we would need a lot of special rules in OpenSSH just for Cygwin.
> > Sorry, but that's how it is.
> 
> Thanks for the explanation -- this is understandable.
> 
> In that case, the former arrangement before the patch was preferable.
> 
> That is: For DOMAIN+username or COMPUTERNAME+username, the part before
> the "+" must be UPPERCASE, but the username is not case-sensitive.
> 
> IMO This is the simplest and most straightforward arrangement.

No, that was a bug.  With case insenitive usernames, the pattern
matching in OpenSSH won't work and you create a potential security
problem.


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer

Attachment: signature.asc
Description: PGP signature