Prohibit authentication with changing IDs

himmelblau-idm / himmelblau

Azure Entra ID Authentication, with PAM and NSS modules.

GNU General Public License v3.0

45 stars 8 forks source link

Prohibit authentication with changing IDs #38

Closed dmulder closed 1 year ago

dmulder commented 1 year ago

It's possible for a MFA DAG request to respond with a successful auth for a user other than the originally requested user. This could corrupt our cache and process pam_allow_groups incorrectly.

BUG: https://github.com/openSUSE/himmelblau/issues/37