[Bug 3853] Potential Match User block evasion for kerberos realm users

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Nov 8 17:46:02 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3853

--- Comment #5 from Damien Miller <djm at mindrot.org> ---
I'm suggesting that NSS should have an option to make it accept
usernames in only canonical form and reject all others. This would fix
this problem system-wide, not just for sshd.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list