On Sun, Nov 24, 2024 at 11:58:44AM +0100, Bjørn Mork wrote:
> Marc Haber <mh+debian-de...@zugschlus.de> writes:
> >> On the other hand, as long as this is admin-controlled, it doesn't
> >> matter much. I could see that viewpoint, but I wonder how much latent
> >> breakage would be introduced that will take years to fix in all tooling
> >> and all packages.
> >
> > Yes. Fixing breakage makes software better, and by disallowing non-latin
> > characters in user names we are hiding those issues away.
> 
> This is arrogant.

That was not my intention. I apologize for that.

> Assuming that a username can be displayed, sorted,
> compared and typed using strict us-ascii is not a bug today. It's not
> "hiding" any issue.

I have to disagree. Our tools allow creating UTF-8 usernames today, and
even if they did it would be possible to just edit /etc/passwd.

> The question is whether it makes sense to introduce a new class of bugs
> by changing the rules.  And we can pretty much guarantee that some of
> those bugs are securty critical, since this is all about authentication
> and authorization.

So we're having these bugs right noow. If you can use adduser or useradd
to create such accounts, then you have the privilege of putting them
directly into /etc/passwd as well. /etc/passwd is a well-defined and
documented interface.

> For what purpose? 

Being friendly to people who can't properly write their names in latin.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Reply via email to