Re: rename user via PAM module?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2011-06-15 at 11:25 +0200, Wolfgang Draxinger wrote: 
> On Tue, 14 Jun 2011 18:49:03 +0200
> Riccardo Murri <riccardo.murri@xxxxxxxxx> wrote:
> 
> > Hello,
> > 
> > Is there a PAM module to remap the username according to some simple
> > configuration file?  I'm thinking of reading a simple plaintext file:
> >
> > (...)
> 
> Yes such changes are possible. In fact I recently (last week) wrote a
> PAM module of similar pupose (also announced it here on the list):
> 
> | Hello PAM maintainers,
> | 
> | I'd wanted to let you know of a new PAM module out there, that I've
> | written today. The source can be found at
> | 
> | https://github.com/datenwolf/pam_propperpwnam
> | 
> | (...)
> 
> This works flawlessly with OpenSSH sshd, so I cannot confirm the
> concerns Tomas Mraz, though if someone could show me a counter example
> I'd be glad.

This perhaps works for you somehow because you're not doing arbitrary
mapping of user names but just canonicalize them through getpwnam_r().
But there is really no code in openssh that would adjust the user name
it obtained from the connection in its internal variables that store it
and that's later used in other calls to system.

Also see https://bugzilla.mindrot.org/show_bug.cgi?id=1215

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb

_______________________________________________
Pam-list mailing list
Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list


[Index of Archives]     [Fedora Users]     [Kernel]     [Red Hat Install]     [Linux for the blind]     [Gimp]

  Powered by Linux