aboutsummaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
Diffstat (limited to 'README')
-rw-r--r--README14
1 files changed, 14 insertions, 0 deletions
diff --git a/README b/README
new file mode 100644
index 0000000..8085e99
--- /dev/null
+++ b/README
@@ -0,0 +1,14 @@
+The purpose of this module is to enforce a certain naming policy (based on
+perl regular expression syntax) on usernames (i.e. all lowercase). This is
+necessary since e.g. pam_ladp treats usernames as case insensitive. In fact it
+relies on the ldap server to compare the username to the uid attribute and the
+cosine schema is case insensitive at this point.
+
+e.g. you can use the following to enforce lowercase usernames consisting only
+of letters:
+
+auth required pam_naming.so debug regex=^[a-z]+$
+
+This will allow a user foo to log in but not when typed as FOO or FoO.
+
+ -- Guido Guenther <agx@sigxcpu.org> Tue, 6 Dec 2005 18:27:31 +0100