Here's the answer from upstream :

"Hi,

thank you for your report. We came across this issue in Fedora
(https://bugzilla.redhat.com/show_bug.cgi?id=2423900) as well and it was
fixed by thew Fedora maintainer by not comparing the names but the UIDs
related to the given names. It looks like this patch it not upstream.
But upstream has a different way to solve the issue. If I use

    
https://github.com/openssh/openssh-portable/commit/2425d7faf4154b32b5f836596023cf2432b81eaf
    
https://github.com/openssh/openssh-portable/commit/5d72f1865b95ebfd99ea7baa8f6f2a4b721d151e

instead of the Fedora patch the issue is solved for me as well.

Can you try if using those two commits can help to solve the issue on
Ubuntu as well?

bye,
Sumit"

I found a similar report in Ubuntu 26.04 openssh
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2150273 that was
solved by using Fedora's patch.

Those openssh commits being released in 10.3p1, I installed it with
Debian's 14 package and indeed it solved the issue.

I closed my upstream report as nothing has to be done on sssd's side.
However, I'm quite unfamiliar with how to follow-up on this on Ubuntu's openssh 
side between a distribution patch or an upgrade from upstream ?

** Bug watch added: Red Hat Bugzilla #2423900
   https://bugzilla.redhat.com/show_bug.cgi?id=2423900

** Also affects: openssh (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2151817

Title:
  SSSD incompatible with OpenSSH ≥10.1p1 PAM username consistency check
  when using short names

To manage notifications about this bug go to:
https://bugs.launchpad.net/sssd/+bug/2151817/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to