PAM 3.2 and case sensitivity

Is there a reason PAM is case sensitive wrt user names? We set up user names in all uppercase in the Framework User Manager. When logging in with lowercase names, the user is authenticated but not authorized for any consoles so the PAM Framework Console doesn't show any logins. Furthermore, when trying to run something like "usrun shell" on a UNIX server for privileged shell access, unless the user's lowercase name is in a User Group, the command fails.

Why doesn't PAM just ignore the case of a user to avoid all of this?
  • On 04/23/2019 08:56 AM, achinayoung waubonsee wrote:
    >
    > Is there a reason PAM is case sensitive wrt user names? We set up user
    > names in all uppercase in the Framework User Manager. When logging in
    > with lowercase names, the user is authenticated but not authorized for
    > any consoles so the PAM Framework Console doesn't show any logins.
    > Furthermore, when trying to run something like "usrun shell" on a UNIX
    > server for privileged shell access, unless the user's lowercase name is
    > in a User Group, the command fails.
    >
    > Why doesn't PAM just ignore the case of a user to avoid all of this?


    Computers, in general, are case-sensitive; when you type 'A' it is
    different from when type 'a' from the keyboard all the way through the OS
    and applications; making computers treat characters otherwise requires
    programming them explicitly to ignore case, often by forcing strings to
    lower case and then comparing with other lower-case versions (if possible).

    Especially with authentication data (usernames, passwords, etc.)
    case-sensitivity is desired because it makes guessing others' credentials
    harder. Unix/Linux, where PAM/PUM is usually used, also treats usernames
    case-sensitively, so having the wrong case (usernames are usually all
    lower case) means you literally have the wrong user.

    --
    Good luck.

    If you find this post helpful and are logged into the web interface,
    show your appreciation and click on the star below.

    If you want to send me a private message, please let me know in the
    forum as I do not use the web interface often.