{"action":"created","issue":{"url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/12","repository_url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd","labels_url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/12/comments","events_url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/12/events","html_url":"https://github.com/arthurdejong/nss-pam-ldapd/issues/12","id":143360034,"number":12,"title":"How to ignore upper case uid string from ldap server ?","user":{"login":"tjyang","id":378638,"avatar_url":"https://avatars.githubusercontent.com/u/378638?v=3","gravatar_id":"","url":"https://api.github.com/users/tjyang","html_url":"https://github.com/tjyang","followers_url":"https://api.github.com/users/tjyang/followers","following_url":"https://api.github.com/users/tjyang/following{/other_user}","gists_url":"https://api.github.com/users/tjyang/gists{/gist_id}","starred_url":"https://api.github.com/users/tjyang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tjyang/subscriptions","organizations_url":"https://api.github.com/users/tjyang/orgs","repos_url":"https://api.github.com/users/tjyang/repos","events_url":"https://api.github.com/users/tjyang/events{/privacy}","received_events_url":"https://api.github.com/users/tjyang/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-03-24T21:08:52Z","updated_at":"2016-03-25T18:02:21Z","closed_at":null,"body":"We have ldap server storing uid as all upper case, in stead of lower case Unix uid.\r\nnss-pam-ldapd-0.8.13-8 on centos 7 is failing due to this corrected behavior in this  newer version of nss-pam-ldapd. \r\n\r\nCurrently this is our hack to avoid the the uid case check.\r\n\r\n```\r\n--- nslcd/pam.c.orig\t2013-04-28 15:32:34.000000000 -0500\r\n+++ nslcd/pam.c\t2016-03-24 12:50:24.614661980 -0500\r\n@@ -133,11 +133,13 @@\r\n     return;\r\n   }\r\n   /* check if the username is different and update it if needed */\r\n-  if (strcmp(username,value)!=0)\r\n+  /* disable following 5 lines to ignore uid case checking */\r\n+  /* if (strcmp(username,value)!=0)\r\n   {\r\n     log_log(LOG_INFO,\"username changed from \\\"%s\\\" to \\\"%s\\\"\",username,value);\r\n     strcpy(username,value);\r\n-  }\r\n+   } \r\n+  */\r\n }\r\n\r\n```\r\n\r\nWill above hack causing security issue ?\r\nIs there a better way to set the ignore case check from ldap server  in /etc/nslcd.conf instead ?\r\n"},"comment":{"url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/comments/201393092","html_url":"https://github.com/arthurdejong/nss-pam-ldapd/issues/12#issuecomment-201393092","issue_url":"https://api.github.com/repos/arthurdejong/nss-pam-ldapd/issues/12","id":201393092,"user":{"login":"tjyang","id":378638,"avatar_url":"https://avatars.githubusercontent.com/u/378638?v=3","gravatar_id":"","url":"https://api.github.com/users/tjyang","html_url":"https://github.com/tjyang","followers_url":"https://api.github.com/users/tjyang/followers","following_url":"https://api.github.com/users/tjyang/following{/other_user}","gists_url":"https://api.github.com/users/tjyang/gists{/gist_id}","starred_url":"https://api.github.com/users/tjyang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tjyang/subscriptions","organizations_url":"https://api.github.com/users/tjyang/orgs","repos_url":"https://api.github.com/users/tjyang/repos","events_url":"https://api.github.com/users/tjyang/events{/privacy}","received_events_url":"https://api.github.com/users/tjyang/received_events","type":"User","site_admin":false},"created_at":"2016-03-25T18:02:21Z","updated_at":"2016-03-25T18:02:21Z","body":"Thanks for the reply.\r\nChanging the data in corporate LDAP server is close to impossible. \r\n\r\nI worked with Redhat support once and they also confirm \"ignorecase yes\" has no effect on ignoring case. \r\nThis is confirmed by \" if (strcmp(username,value)!=0)\" line in nslcd/pam.c\" since it is not using strcasecmp function.\r\n\r\nAre you saying \"ignorecase yes\" setting in /etc/nslcd.conf should be able to ignore uppercase in my ldap server ?\r\n\r\n"}}