search

aad-for-linux / pam_aad

Azure Active Directory PAM Module
GNU General Public License v3.0
22 stars 9 forks source link

Blacklist certain account names? #9

Open oxr463 opened 2 years ago

oxr463 commented 2 years ago

@neverrend:

Currently the app works in such a fashion that it accepts the username and turns it into an email. Should block certain usernames such as root to prevent automated attacks from bots looking for low hanging fruit.

@oxr463:

It should check local users. The lookups for that are done by libnss_aad.

Source: https://github.com/CyberNinjas/pam_aad/blob/master/pam_aad.c#L500

See: https://linux.die.net/man/3/pam_get_user

See: https://github.com/CyberNinjas/pam_aad/issues/54