[Bug 204] New: Authentication fails when username contains an at-sign

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=204

           Summary: Authentication fails when username contains an at-sign
           Product: Portable OpenSSH
           Version: 3.1p1
          Platform: All
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: britt at yenne.net


I have a Linux box running the Ensim web hosting software.  Users on virtual 
accounts are required to log in using domain-qualified usernames 
like "user at host.com", for instance:

  ssh hostname -l user at host.com

This worked with SSH version 2.9p2-11.7 but fails with 3.1p1.  I tracked the 
problem down to a change at line 376 in auth1.c:

        /* XXX - SSH.com Kerberos v5 braindeath. */
        if ((p = strchr(user, '@')) != NULL)
                *p = '\0';

Commenting out that code fixes the problem, although now I'm having a problem 
with pty allocation.  Sigh.

-britt



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.