X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=bmblBBg2oJU/IQAu5udQHtvw+V1xlHgtIKu3EbYKDbYc8eSwnYZkw
	eEGqU47K4nZBHWsS/btJNDdistHp2NWY8I9Qohl+VGPFQ1HrdfD+BCE7GObhS80x
	Zczrjg8zgwi1zXS9xbHyP7ca6jkDFUESJyhHxvZ3tIAGmMG+sFMJDI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=4Gxp+mF2IC8smx97N5Bcmtr7m2A=; b=IM+NMvK2Xw8bCD8k9IBARcbCb6an
	QSu1TlD/oKFDYHs/7xXrZsYhueGG7d+L9U9xWpBclhQdNg9slpwxHCujXUm+k8yP
	l8bZvlRsYH2D47dhAAcpSQPWRfbS/svHfbGJ5LmEbMw4VzzD3JNw698zKexaukro
	g56e+cInj7djHhw=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-100.9 required=5.0 tests=BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=
X-HELO: mout.kundenserver.de
Date: Wed, 13 Feb 2019 18:55:41 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: sshd: computer name's case must match?
Message-ID: <20190213175541.GE3718@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <CANV9t=QxA_FW-3OCZuYFJpxrekbO8Yc-WsnxGLiyc0Bqz=fPUw AT mail DOT gmail DOT com> <20190213103200 DOT GK3718 AT calimero DOT vinschen DOT de> <20190213122509 DOT GL3718 AT calimero DOT vinschen DOT de> <CANV9t=TW6Kwxo9pN=3Hp8Yzi5A4i2qQpiLoGyEqxR5rq7vu5pA AT mail DOT gmail DOT com> <20190213161029 DOT GY3718 AT calimero DOT vinschen DOT de> <CANV9t=RiBTNsGUwEf6BS9A6b=fMcHeiGD_RDOueKHJ5c9Zwe_g AT mail DOT gmail DOT com> <20190213162614 DOT GA3718 AT calimero DOT vinschen DOT de> <CANV9t=RmEik5VN-Zebc5h+9JUqYZL0QO5RP0UH5F--=zX8NkYg AT mail DOT gmail DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;	protocol="application/pgp-signature"; boundary="2YJj5f1P6Th4nBRw"
Content-Disposition: inline
In-Reply-To: <CANV9t=RmEik5VN-Zebc5h+9JUqYZL0QO5RP0UH5F--=zX8NkYg@mail.gmail.com>
User-Agent: Mutt/1.10.1 (2018-07-13)

--2YJj5f1P6Th4nBRw
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Feb 13 10:43, Bill Stewart wrote:
> On Wed, Feb 13, 2019 at 9:26 AM Corinna Vinschen
> <corinna-cygwin AT cygwin DOT com> wrote:
> > No, that was a bug.  With case insenitive usernames, the pattern
> > matching in OpenSSH won't work and you create a potential security
> > problem.
>=20
> I see - interoperability issue.
>=20
> Therefore it becomes imperative on the Windows side to match username
> case exactly and we need to explain this.
>=20
> However I would say that the case of the domain or computername
> shouldn't matter?
>=20
> I just tested with cygwin1.dll (13 Feb 2019) and this worked:
>=20
> ssh COMPUTERNAME+username AT computername
>=20
> however this didn't work:
>=20
> ssh computername+username AT computername
>=20
> Am I not understanding something?

The complete string "domain+samaccountname" is the Cygwin username,
see the output of `getent passwd <user>' The entire Cygwin username
should always use the same case, otherwise case sensitive pattern
matching on the name returned in the passwd name field won't work.

Play with `getent passwd' with the latest and the previous Cygwin
DLL.  That should give you an idea.


Corinna

--=20
Corinna Vinschen
Cygwin Maintainer

--2YJj5f1P6Th4nBRw
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=8FFn
-----END PGP SIGNATURE-----

--2YJj5f1P6Th4nBRw--