#7572 IPA numeric username breaks sudo and getent
Closed: fixed 2 years ago Opened 2 years ago by frenaud.

Ticket was cloned from Red Hat Bugzilla: Bug 1562396

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:

IPA allows creating a user account with numeric name, But sudo doesn't work for
the user.

I have also observed that getent is also not working for the user.

[root@ipa1 ~]# id 2345
uid=923600013(2345) gid=923600013(2345) groups=923600013(2345)
[root@ipa1 ~]# getent passwd 20319
[root@ipa1 ~]#


Version-Release number of selected component (if applicable):

==
[root@ipa1 ~]# rpm -qa ipa-server
ipa-server-4.5.0-22.el7_4.x86_64
==


How reproducible:

yes

Steps to Reproduce:

[root@ipa1 ~]# ipa user-add 1234
First name: 1
Last name: 2
-----------------
Added user "1234"
-----------------
  User login: 1234
  First name: 1
  Last name: 2
  Full name: 1 2
  Display name: 1 2
  Initials: 12
  Home directory: /home/1234
  GECOS: 1 2
  Login shell: /bin/sh
  Principal name: 1234@EX.COM
  Principal alias: 1234@EX.COM
  Email address: 1234@ex.com
  UID: 923600014
  GID: 923600014
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
[root@ipa1 ~]# id 1234
uid=923600014(1234) gid=923600014(1234) groups=923600014(1234)
[root@ipa1 ~]# getent passwd 1234
[root@ipa1 ~]# getent passwd admin
admin:*:923600000:923600000:Administrator:/home/admin:/bin/bash


Actual results:

Sudo and getent not working

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1562396

2 years ago

FreeIPA should prevent the creation of users with numeric characters only.

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.6.4

2 years ago

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.6.5 (was: FreeIPA 4.6.4)

2 years ago

Metadata Update from @abiagion:
- Issue assigned to abiagion

2 years ago

master:

  • d622be2 Prevent the creation on users and groups with numeric characters only

ipa-4-6:

  • fe608f0 Prevent the creation on users and groups with numeric characters only

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata