[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: About valid and invalid user names

On Sat, 05 Feb 2005 13:38:36 +0100, Marc Haber
<mh+debian-devel@zugschlus.de> wrote:
>adduser has two bug reports open where people are asking for user name
>rules to be relaxed. One report wants "." to be allowed in user names,
>another wants usernames to start with numbers.
>May I ask for your opinion before denying or following the requests?

After the discussion, I am now inclined to do the following:

By default, adduser will verify the user against a configurable
regexp, default being the most conservative ^[a-z][a-z0-9\-]*$. The
--force-badname option will change the regexp to a hardcoded
^[-\._A-Za-z0-9]*\$?$, allowing users to happily hang themselves. This
gives the somewhat funny situation that the default can be configured
to be less restrictive than --force-badname, but I doubt that it would
be sensible to have --force-badname turn off all checks.

Your opinion?


-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber         |   " Questions are the         | Mailadresse im Header
Mannheim, Germany  |     Beginning of Wisdom "     | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

Reply to: