On Thu, Feb 14, 2019 at 6:43 AM Bill Stewart wrote: > I think this is the difficulty: When a computer name is not uppercase, > how do we find out the correct case when we specify an authority name > (before the +)?
Upon reflection, here's what comes to mind from a purely Cygwin perspective: (a) When Cygwin returns a name containing an authority (name to the left of the + character), convert it to uppercase (or lowercase). Advantages: Easier to use. End-user doesn't have burden of determining the correct case for the authority name. Disadvantages: A remote machine might actually use a + character in a username (even though this shouldn't be permissible from a POSIX point of view) and we risk a name collision, opening a small potential security hole because we matched the wrong name. This risk only applies to remote non-Windows servers, since + is an illegal character in a local Windows user account name and domain sAMAccountName attribute. End user still has to match case of username. (b) Do nothing - authority and username case must match exactly. Advantages: No further code changes. Potential security risk is mitigated. Disadvantages: Not intuitive and confusing from a Windows perspective. End-user has burden of determining correct case for both authority name and username. (This can be mitigated somewhat by addressing this in the FAQ, but we all know how often people read the FAQ.) [FWIW, I wrote a short PowerShell script that (probably) does the right thing in returning the correct case, but for the case of a local computer authority it only works against the local computer. (It seems to work fine for the current computer's domain and any trusted domains.)] >From an OpenSSH perspective, IMO, it would seem that the most straightforward solution would be, if possible, for sshd to ignore username case for incoming connections when it's running on Windows. Thanks! Bill -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
