Sessions are created with the user as typed and not the full DN

IKSG / nsf-file-server

SFTP server backed by an NSF

Apache License 2.0

3 stars 0 forks source link

Sessions are created with the user as typed and not the full DN #34

Open jesse-gallagher opened 1 year ago

jesse-gallagher commented 1 year ago

For example, if your user is CN=Foo Fooson/O=SomeOrg, you can log in as Foo Fooson (since it'll find it in the directory), but the session will be created as just that bare name and will not match ACL access for the real user.