https://bugzilla.mindrot.org/show_bug.cgi?id=3955
--- Comment #1 from Christoph Fiehe <[email protected]> --- Would it be possible to modify the code with something like this diff --git a/auth-pam.c b/auth-pam.c index 2c8a7a2e..c0d4a9c3 100644 --- a/auth-pam.c +++ b/auth-pam.c @@ -1547,6 +1547,18 @@ check_pam_user(Authctxt *authctxt) if (strcmp(sshpam_initial_user, pam_user) != 0) { + /* Allow aliasing if both names resolve to the same UID */ + struct passwd *pw_pam = NULL; + + if (authctxt->pw != NULL && + (pw_pam = getpwnam(pam_user)) != NULL && + pw_pam->pw_uid == authctxt->pw->pw_uid) { + debug_f("PAM user \"%s\" differs from previous \"%s\" " + "but resolves to same uid %lu; allowing", + pam_user, sshpam_initial_user, + (u_long)authctxt->pw->pw_uid); + return PAM_SUCCESS; + } error_f("PAM user \"%s\" does not match previous \"%s\"", pam_user, sshpam_initial_user); return PAM_USER_UNKNOWN; } What do you think? -- You are receiving this mail because: You are watching the assignee of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
