Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a check to block certain users #54

Open
neverrend opened this issue Mar 6, 2020 · 1 comment
Open

Add a check to block certain users #54

neverrend opened this issue Mar 6, 2020 · 1 comment

Comments

@neverrend
Copy link
Contributor

Currently the app works in such a fashion that it accepts the username and turns it into an email. Should block certain usernames such as root to prevent automated attacks from bots looking for low hanging fruit.

@oxr463
Copy link
Contributor

oxr463 commented Mar 6, 2020

It should check local users. The lookups for that are done by libnss_aad.

Source: https://github.com/CyberNinjas/pam_aad/blob/master/pam_aad.c#L500

See: https://linux.die.net/man/3/pam_get_user

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants