[Bug 484734] [NEW] User names searches are case insensitive; group membership lookups case sensitive
Roel van Os
roel.van.os at humanitech.nl
Wed Nov 18 12:25:00 GMT 2009
Public bug reported:
Binary package hint: libnss-ldap
We are using LDAP as a user database. Users log in using GDM on
workstations running Ubuntu 9.04.
We've standardized on lowercase usernames. The problem is that when a
user logs in using a login name that differs only in case (eg. Roel,
roeL), logging in works, however the group memberships are not applied.
This can be seen by running the id command:
$ id roel
uid=1004(roel) gid=513(Domain Users) groups=513(Domain Users),1000(General)
$ id Roel
uid=1004(roel) gid=513(Domain Users) groups=513(Domain Users)
Note the missing General group. This causes problems with accessing
shared directories that are only accessible by certain groups. We've
instructed the users to use lowercase letters, but IMHO login names
should always be case sensitive.
Perhaps unrelated, it seems that the bug is fixed in the libnss-ldapd
fork in Karmic: http://changelogs.ubuntu.com/changelogs/pool/universe/n
Description: Ubuntu 9.04
*** 261-2.1ubuntu1 0
500 http://nl.archive.ubuntu.com jaunty/main Packages
** Affects: libnss-ldap (Ubuntu)
User names searches are case insensitive; group membership lookups case sensitive
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.
More information about the Ubuntu-server-bugs