What happened to normalizeuid?

Nic Bernstein nic at onlight.com
Fri Jan 20 08:34:20 EST 2017


The "normalize" patch included by Debian isn't that far off from what 
the option "usercase_tolower" already offers:

    username_tolower (*on*|off)
    Convert usernames to all lowercase before login/authentication.  This
    is useful with authentication backends which ignore case during
    username lookups (such as LDAP).

Here's what the Debian patch 
(0013-Normalize-the-authentication-ID.patch) says:

    By normalize, it is intended that;

         1) Authentication IDs all can be lowercased for more accurate
            comparison without being volatile to, say, user error, and
         2) Any leading or trailing blank space can be stripped

And then they go on to patch, mostly, lib/auth_unix.c (as well as 
global.c, imapoptions, etc.).

Other than trimming white space, I can't see what the big deal is with 
this patch.

Cheers,
     -nic

On 01/20/2017 04:24 AM, Sebastian Hagedorn via Info-cyrus wrote:
>
> --On 20. Januar 2017 um 08:04:25 +1100 Bron Gondwana via Info-cyrus 
> <info-cyrus at lists.andrew.cmu.edu> wrote:
>
>> On Fri, 20 Jan 2017, at 03:31, Sebastian Hagedorn via Info-cyrus wrote:
>>> --On 19. Januar 2017 um 17:18:06 +0100 Simon Matter
>>> <simon.matter at invoca.ch> wrote:
>>>
>>> > We and others had this as a patch in our RPMs but I think it has 
>>> never
>>> > been part of vanilla cyrus-imapd.
>>>
>>> Oops. Should I open an issue for a feature request? I'm surprised 
>>> that's
>>> not something many sites want ...
>>
>> OK, I've never heard of this thing. What is it?
>>
>> .. lmgtfy ..
>>
>> Right, so it's something to normalise the userid when you log in.
>>
>> It will definitely have to be rewritten for Cyrus 3+, because all that
>> stuff got moved into mbname_t and friends.
>
> Perhaps my assumption that the option is necessary is wrong? But I 
> know for certain that our webmail users use varied case-spellings of 
> their user names, because in earlier versions of our webmail system 
> they would get different user profiles depending on how they had 
> entered their user names ;-)
>
> Bron, how does Fastmail deal with that? Do you simply force users to 
> use the canonic spelling? I guess we could do that, but I'd rather not.
>
> Cheers
> Sebastian
>
>
> ----
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus

-- 
Nic Bernstein                             nic at onlight.com
Onlight Inc.                              www.onlight.com
6525 W Bluemound Rd., Ste 24	          v. 414.272.4477
Milwaukee, Wisconsin  53213-4073	  f. 414.290.0335

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20170120/58f2a10d/attachment-0001.html>


More information about the Info-cyrus mailing list