Re: Fwd: Bug#552433: libnss-ldapd: ignores case of uids

[Petter Reinholdtsen <pere@hungry.com>]

[Arthur de Jong]
> Dear stable release team,
>
> A user reported a bug (#552433) against libnss-ldapd which causes some
> problems and asked if a fix can be made available in a stable update.
>
> I can probably backport the fix to version 0.6.7.1 but I wanted to know
> if such a fix will be considered a candidate for proposed-updates before
> putting in the effort.

I really hope you find time to fix this in Lenny, as it affects Debian
Edu.  The issue is also a security issue, where users can by-pass
netgroup based limitations by changing the case of the username they use
when logging in.  See
<URL: http://bugs.skolelinux.org/show_bug.cgi?id=1383 > for more
information about that facet of this problem.

Happy hacking,
-- 
Petter Reinholdtsen