https://bugzilla.novell.com/show_bug.cgi?id=447191 User lchiquitto@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=447191#c6 Summary: pam_mail can set wrong $MAIL when pam_ldap is in use Product: openSUSE 11.1 Version: Factory Platform: All OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: lchiquitto@novell.com QAContact: qa@suse.de Found By: L3 When configuring a system to use LDAP as the authentication method, we can see the side effect described in comments #6 and #8 of bnc#444624. To make the long story short: the user can supply his user name with leading or trailing white spaces (or with mixed case) and the authentication will still succeed. # ssh localhost -l ' UsEr' The authenticity of host 'localhost (127.0.0.1)' can't be established. RSA key fingerprint is aa:07:77:ce:be:4e:2d:44:99:a9:cc:73:c2:f9:de:d7. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'localhost' (RSA) to the list of known hosts. Password: Last login: Thu Jun 5 05:05:01 2008 user@localhost:~> This is the expected behavior. The problem is that, when pam_mail is active (by default in /etc/pam.d/login), the $MAIL environment variable is set based on the typed user name: localhost login: UsEr Password: Last login: Thu Jun 5 05:06:10 EDT 2008 from localhost on pts/1 $ echo $MAIL /var/mail/ UsEr $ And this is incorrect. I'm attaching a proposed patch. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.