[Bug 484734] [NEW] User names searches are case insensitive; group membership lookups case sensitive

Roel van Os roel.van.os at humanitech.nl
Wed Nov 18 12:25:00 GMT 2009

Public bug reported:

Binary package hint: libnss-ldap

We are using LDAP as a user database. Users log in using GDM on
workstations running Ubuntu 9.04.

We've standardized on lowercase usernames. The problem is that when a
user logs in using a login name that differs only in case (eg. Roel,
roeL), logging in works, however the group memberships are not applied.
This can be seen by running the id command:

$ id roel
uid=1004(roel) gid=513(Domain Users) groups=513(Domain Users),1000(General)

$ id Roel
uid=1004(roel) gid=513(Domain Users) groups=513(Domain Users)

Note the missing General group. This causes problems with accessing
shared directories that are only accessible by certain groups. We've
instructed the users to use lowercase letters, but IMHO login names
should always be case sensitive.

Perhaps unrelated, it seems that the bug is fixed in the libnss-ldapd
fork in Karmic: http://changelogs.ubuntu.com/changelogs/pool/universe/n

Ubuntu version:
Description:	Ubuntu 9.04
Release:	9.04

  Installed: 261-2.1ubuntu1
  Candidate: 261-2.1ubuntu1
  Version table:
 *** 261-2.1ubuntu1 0
        500 http://nl.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status

** Affects: libnss-ldap (Ubuntu)
     Importance: Undecided
         Status: New

User names searches are case insensitive; group membership lookups case sensitive
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.

More information about the Ubuntu-server-bugs mailing list