jesse-gallagher
commented
4 years ago This is a bit too fiddly to properly deal with, at least for now. With SFTP, I think that a lot of clients parse the ls -l output, which is space-delimited. For now, I modified name support to use the CN with + delimiters.
Currently, the code creates a "short CN" from the user's CN to avoid trouble with clients. This isn't great, though, since it's pretty likely that the mangled one won't correspond to an actual username, and it certainly loses hierarchical information.
This may be okay on its own, but it may be best instead to see if LDAP-style names are treated better, or if it'd be worth looking up a user's short name from the directory.