#7572 IPA numeric username breaks sudo and getent
Closed: fixed Opened by frenaud.

Ticket was cloned from Red Hat Bugzilla: Bug 1562396

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
IPA allows creating a user account with numeric name, But sudo doesn't work for
the user.
I have also observed that getent is also not working for the user.
[root@ipa1 ~]# id 2345
uid=923600013(2345) gid=923600013(2345) groups=923600013(2345)
[root@ipa1 ~]# getent passwd 20319
[root@ipa1 ~]#
Version-Release number of selected component (if applicable):
==
[root@ipa1 ~]# rpm -qa ipa-server
ipa-server-4.5.0-22.el7_4.x86_64
==
How reproducible:
yes
Steps to Reproduce:
[root@ipa1 ~]# ipa user-add 1234
First name: 1
Last name: 2
-----------------
Added user "1234"
-----------------
  User login: 1234
  First name: 1
  Last name: 2
  Full name: 1 2
  Display name: 1 2
  Initials: 12
  Home directory: /home/1234
  GECOS: 1 2
  Login shell: /bin/sh
  Principal name: 1234@EX.COM
  Principal alias: 1234@EX.COM
  Email address: 1234@ex.com
  UID: 923600014
  GID: 923600014
  Password: False
  Member of groups: ipausers
  Kerberos keys available: False
[root@ipa1 ~]# id 1234
uid=923600014(1234) gid=923600014(1234) groups=923600014(1234)
[root@ipa1 ~]# getent passwd 1234
[root@ipa1 ~]# getent passwd admin
admin:*:923600000:923600000:Administrator:/home/admin:/bin/bash
Actual results:
Sudo and getent not working

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1562396

FreeIPA should prevent the creation of users with numeric characters only.

Metadata Update from @pvoborni:
- Issue set to the milestone: FreeIPA 4.6.4

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.6.5 (was: FreeIPA 4.6.4)

Metadata Update from @abiagion:
- Issue assigned to abiagion

Pull request: https://github.com/freeipa/freeipa/pull/2067

master:

  • d622be295a8c61fc3b3213527de1684c4af6a7ac Prevent the creation on users and groups with numeric characters only

ipa-4-6:

  • fe608f037e078731f300de89be17cd658c07c7ae Prevent the creation on users and groups with numeric characters only

Metadata Update from @tdudlak:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata